Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What's with the odd font used by spammers? How do they do it?

Tags:

css

fonts

The screenshot below is from my Gmail spam folder. Notice that some of the email from and subject lines look normal, while many of them appear to use some sort of serif font:

Gmail spam folder showing some emails with an odd serif font

I'm a web developer, and from poking around, there's no CSS font declarations that are causing this to happen. The only hint is that the inspection panel for the "ZippyLoan ." sender shows that the fonts being used are not just Google's typical Roboto, but also "Cambria Math" (despite there being no corresponding "Cambria Math" CSS font declaration):

Chrome Dev Tools inspection panel

In fact, it seems that the font definition is somehow built-in to the text, since it even maintains the same appearance in plain-Jane Windows Notepad:

Regular Windows Notepad, showing two fonts.

Actually, here, I think it works anywhere... play around with it yourself it you'd like:

๐’๐’Š๐’‘๐’‘๐’š๐‘ณ๐’๐’‚๐’ .

๐—œ๐—ป๐˜๐—ฟ๐—ผ๐—ฑ๐˜‚๐—ฐ๐—ถ๐—ป๐—ด ๐—Ÿ๐—”๐—ฆ๐—œ๐—ž ๐˜€๐˜๐—ฎ๐—ฟ๐˜๐—ถ๐—ป๐—ด ๐—ฎ๐˜ $๐Ÿฎ๐Ÿฎ๐Ÿฌ ๐—ฝ๐—ฒ๐—ฟ ๐—ฒ๐˜†๐—ฒ!

โค๏ธ๐‘พ๐’†๐’๐’„๐’๐’Ž๐’† ๐’•๐’ ๐’‚ ๐‘ช๐’๐’–๐’“๐’•๐’†๐’”๐’š $50 ๐‘ช๐‘ฝ๐‘บ/๐’‘๐’‰๐’‚๐’“๐’Ž๐’‚๐’„๐’šยฎ ๐’„๐’‰๐’‚๐’“๐’ˆ๐’† ๐’„๐’‚๐’“๐’… (๐’€๐’๐’–๐’“ ๐’‘๐’“๐’†๐’‡๐’†๐’“๐’“๐’†๐’… ๐’„๐’–๐’”๐’•๐’๐’Ž๐’†๐’“ ๐’๐’–๐’Ž๐’ƒ๐’†๐’“ ๐’˜๐’‚๐’” ๐’”๐’†๐’๐’†๐’„๐’•๐’†๐’…)

Whiskey Tango Foxtrot. O.o

like image 780
Sandwich Avatar asked May 06 '19 06:05

Sandwich


People also ask

Why do spammers use weird fonts?

The researchers believe this is the first time this technique of disguising malicious code to evade detection has been observed. The well-crafted phishing web pages use custom web font files known as โ€œwoff filesโ€ to implement a substitution cypher that makes the source code of phishing pages appear benign.

Why am I suddenly getting a lot of spam emails?

If you start receiving an increased amount of spam, with junk mail filters enabled, then there might be a problem with the mailbox that your spam emails are usually moved to. You should check that the target mailbox or mail folder isn't full or disabled.

Why am I getting so many spam texts all of a sudden 2021?

You get spam messages because someone gets access to your email address or phone number. Think about how often you provide your phone number or email address when checking out online, when registering for something, or when signing up for a rewards program in a store.

How do I find out where spam is coming from?

Determining the Source of Spam It takes a close look at the spam message's header lines. These headers contain information about the path an email took.

What are spam trigger words?

Spam trigger words are keywords or phrases that email providers see as red flags. Youโ€™ll often find these words in emails that people mark as spam. As the saying goes, โ€œif it sounds too good to be true, it probably is.โ€ Spam filters catch suspicious words and phrases associated with:

Do spam filters catch โ€œtoo good to be trueโ€ emails?

As the saying goes, โ€œif it sounds too good to be true, it probably is.โ€ Spam filters catch suspicious words and phrases associated with: Gmailโ€™s spam filter caught all of these promotional emails. Now theyโ€™re left to languish in my spam folder for eternity. (Or until Gmail automatically deletes them after 30 days.)

What are the most common ways that spammers use your information?

That said, there are worse ways that spammers use for financial gain. One such way is phishing, that is, to get sensitive personal information, such as passwords or credit card information, from the user, by pretending to be an important or official source, such as a bank or an IT manager, or promoting a fake offer to grab the userโ€™s attention.

Can a spambot detect a footprint?

Even when the platform itself is not immediately recognizable to a spambot, there are various ways they can detect and leave comments, such as by a brute-force attack whereby they test various methods to see which works on your comment system, so even avoiding footprints is not enough to deter them, although it does help. What do spammers want?


Video Answer


1 Answers

It's not a different font - it's the same font, just using odd code points. For example, the ๐’ in ๐’๐’Š๐’‘๐’‘๐’š๐‘ณ๐’๐’‚๐’ has a code point of 119937:

console.log('๐’'.codePointAt());

which corresponds to:

๐’ mathematical bold italic capital z 0352201 119937 0x1D481 ๐’

There are many such odd code points that can be used. It's not ASCII.

In contrast, the standard capital Z has a code point of 90:

console.log('Z'.charCodeAt());
like image 113
CertainPerformance Avatar answered Sep 18 '22 12:09

CertainPerformance