Based on the results of this minimal organization, we can identify specific
attributes of this spammer:
■
The hash buster is nearly always connected to the subject.
■
The subject typically does not end with punctuation. However, if punc-
tuation is included, it is usually an exclamation point.
■
The file sizes are roughly the same number of lines (between 50 and
140 lines—short compared to most spam messages).
■
Every one of the forged e-mail addresses claims to come from
yahoo.com.
■
Every one of the fake account names appears to be repetitive letters fol-
lowed by a number. In particular, the letters are predominantly from the
left-hand side of the keyboar ...