I'm getting a huge amount of blank spam purporting to be sent by "Pfizer" or "Pfizer & Lilly" with headings like "Reminder Notice, "Customer Notification: Re-Order," "Client Notice," "Confidential: Re-Order" and the like.
The text contains nothing, and I doubt these are deliberately coming from Pfizer. Nor do I think they are "real" "spam" -- hence the quotes.
Last fall, however, a Wired article discussed Pfizer spam, and claimed the company's computers were hacked. Except I don't think that's happening this time, because when I ran the IP numbers on Network Tools, it told me that they are "from United Arab Emirates(AE) in region Middle East."
I think this might be a new form of guerilla anti-marketing, taking the form of "false flag spam." Most normal people would click on "delete as spam," except I think that is exactly the goal of whoever generated it. Is there a campaign to make company names like Pfizer and Lilly automatically trigger spam detection features of big service providers?
I don't know who is mad at Pfizer or why, but it seems that whoever is doing this could do it to anyone.
Am I alone in getting false flag Pfizer spam?
posted by Eric on 06.01.08 at 11:27 AM
TrackBack
TrackBack URL for this entry: http://classicalvalues.com/cgi-bin/pings.cgi/6766
Comments
The only comment this drew was a spam comment, from a charming chap named "pMqGv5" which linked to websites named "ohukgvdsfbkt" and "svtvwlrcshdq" as well as a link to "jhhueffdzqem's" home page.
I've gotten spam emails that had no message at all (couldn't tell you what company they were or pretended to be from). My best guess was that they were testing a new email distribution system.
tim maguire · June 2, 2008 12:01 PM
I've been getting those spam messages at work almost daily for the past few weeks and delete them without opening. They all seem to contain Pfizer in the from field. You're probably correct about it being some kind of anti-marketing spam.
The only comment this drew was a spam comment, from a charming chap named "pMqGv5" which linked to websites named "ohukgvdsfbkt" and "svtvwlrcshdq" as well as a link to "jhhueffdzqem's" home page.