Sources
Help build the largest human-edited directory on the web.
Submit a site - Become an editor
Wikipedia. Licensed under the GNU Free Documentation License.
Are you an expert in this subject? Join the discussion and share your knowledge at Wikipedia.org.
Directory Harvest Attack
From Wikipedia, the free encyclopedia
A Directory Harvest Attack or DHA is a technique used by spammers in an attempt to find e-mail addresses. It is usually carried out by generating a flood of messages to multiple addresses at a mail server that is known to be valid. Most often, these attacks are targeted at corporations since they are likely to have a standard format for official e-mail aliases (i.e. jdoe(at) company.com, johnd(at)company.com, or johndoe(at)company.com).
There are two main techniques for generating the addresses that a DHA will target. In the first, the spammer creates a list of all possible combinations of letters and numbers up to a maximum length (15, for example) and then appends the domain name. The other, more targeted, technique is to create a list that combines first initials or common first names with common surnames (as in the example above). The success of a directory harvest attack depends on the mail server sending "bounce-backs" or automated replies to the sender for non-existent aliases. Any addresses that do not respond with a bounce-back are considered to be valid and are added to the spammers list (which are commonly sold between spammers).
- List of the top-25 IP addresses being used to launch Directory Harvest Attacks as identified by Project Honey Pot
- Definition on Postini.com -- a major e-mail services provider.
- Definition on TechEncylopedia
|
|
|
|---|---|
| E-mail spam | DNSBL • Spamhaus • Anti-spam techniques • Spambot • Address munging • SORBS E-mail authentication • Directory Harvest Attack • SpamCop • Dictionary spamming |
| Spamdexing | Google bomb • Keyword stuffing • Cloaking • Link farm • Web ring Referer spam • Blog spam • Spam blogs |
| Telemarketing | Autodialer • Mobile phone spam • VoIP spam |
| Scams | Phishing • Advance fee fraud • Lottery scam • Make money fast • Pump and dump |
| Misc. | Messaging spam • Newsgroup spam • Flyposting History of spamming • Network Abuse Clearinghouse |