Solution for last posting
Tags :Technical
I promised an update from the last posting.
Some digging around gave the following information about the emails
that include the tracking software:
- Mail comes from dtri2.rampellsoft.com (dtri2.rampellsoft.com [69.90.152.225])
- img src="://didtheyreadit.com/index.php/worker?code=c18feef2de6a615adcfc6282e8d60d31" width="1" height="1"
I removed the http part above so it wasn't a hotlink but it shows the clear 1x1 gif image they embed.
So through some work with SpamJam we can block it by looking for that image or just blocking mail from that domain entirely. You could of course use Domino for the domain blocking, but not the content piece. Rampellsoft is of course the company that makes Spector, ViewRemote and TypeRecorderX that is local spyware to watch everything someone does on a PC. So this is not a huge product step in their arsenal.
blog comments powered by Disqus
On Monday, May 31st, 2004 by Chris Miller
