Subscribe to RSS Feed

Cloudmark Blog

Intelligence Briefings from the War on Spam

SMS Sex Spammer Fails Turing Test


Fri, Jan 18, 2013 by Andrew Conway

Sometimes I love my job. How cool is it to run a Turing Test for real? But first, the back story…

For a while now we’ve been receiving SMS spam reports for a three stage attack. This starts with an SMS text message conversation, moves to Yahoo! Messenger or Skype and ends up on the web. The first contact is a text message using the recipient’s correct first name and saying something like:

Hello Mark u there?? Have not heard from u in a while

The spammer is using the victim’s real first name. We believe that and the phone number were collected by data mining social networks. When the victim responds asking who is sending the message they get a reply which is a variation on:

Who are you?

haha if u want to know who this is u got to addd me on Yahoo messenger, my id is XXXXXXXXXX

If the victim tries to continue the conversation it goes like this:

No, really, who is this?

omg my phone is gonna run out of battery. just talk to me on yahoo ;-)

Of course, the Research team at Cloudmark could not wait to find out who this person was who had managed to lose touch with so many thousands of people and incidentally seemed to collect Yahoo! and Skype accounts like other people collect pennies in a jar. We sent Yahoo! Messenger friend requests to a few of the ids in recent messages. Chris got the first response, but I think mine was better. I started by channeling my inner horny college student, but pretty soon the inner computer scientist took over.

Turing Test

Clicking the accept button on the landing page opens two browser windows, one to an adult dating site and one to a web cam site. The web cam site is one of over a thousands URLs owned by a company in Seattle. They all have same content, and their affiliate program pays $40 to the spammer for any person who signs up for the free service, on the assumption that they will be able to extract more money out of them later. The dating site pays the spammer $5 for each visitor, or $75 if the visitor signs up. People who sign up can only hope that the “SEXY SINGLES IN YOUR AREA” on the dating site are more real than the sex crazed robot trying to drum up business, but somehow I doubt it.

At this point Chris decided to have some fun with the bot (everyone has to have a hobby). He found that it doesn’t care about money, but does react to the word “scam”.

Chris vs botIf you do get a text message from a sexy spambot, or any other SMS spam, remember to forward it to 7726 (SPAM on most phone keypads) so that we can help your phone company block these messages.

Tags: , , , , ,

3 Responses to “SMS Sex Spammer Fails Turing Test”

  1. How Online 'Chatbots' Are Already Tricking You | The Today Online Says:

    […] phenomenon. Security research firm Cloudmark has documented the rise of a flirtatious bot called “TextGirlie”. After obtaining a victim’s name and telephone number from their social media profile, […]

  2. Do you really know if it’s a person your talking to right now?! | mickdolansez Says:

    […] phenomenon. Security research firm Cloudmark has documented the rise of a flirtatious bot called “TextGirlie”. After obtaining a victim’s name and telephone number from their social media profile, […]

  3. How online 'chatbots' are already tricking you Says:

    […] phenomenon. Security research firm Cloudmark has documented the rise of a flirtatious bot called “TextGirlie”. After obtaining a victim’s name and telephone number from their social media profile, […]

Leave a Reply


(will not be published)


Submit Your Comments

* Indicates a required field

Site Map  •  Privacy Policy  •  ©2002–2014 Cloudmark, Inc.