On Wed, 12 Feb 2014 15:02:20 -0500 Joe Quinn wrote: > This pattern has been showing up in a good 80% of spam I have looked > at in the past month. > > Spammers take a few paragraphs out of a large body of text and put it > at the end of their email. My favorite is one that had the scene > where Daisy first meets Jay Gatsby. > > Sometimes they add some munging, or like in this example they insert > base64-encoded hashes.
It's not base64, it's just hexadecimal. I don't see any particular reason to think they are hashes. > We have a rule for the plaintext hashes, I presume you've mixed up your examples and given the "plaintext" version, base64 should be just as easy to spot because of the way its padded-out. > Example: http://pastebin.com/zCStErch
