The Sieve

TA!Sieve!Image

  01 November 2006

Description

A variant of Strip Mining, that uses an animated GIF, with transparent frames, and randomly kills pixels in two frames making pixels that are black in one frame match transparent pixels in the other and vice versa.

Submitted by Nick FitzGerald.

Example

Here is what you see in the spam message:

The actual image however has the following three frames:


The first image is the GIF's background and is displayed for 10ms then the second image is layered on top with a transparent background so that the two images merge together and the image the spammer wants you to see appears. That image remains on screen for 100,000 ms (or 1 minute 40 seconds). After that the image is completely blanked out by the third frame.

Note that it's not the entire image that's transparent, not even the white background, but just those pixels necessary to make the black pixels underneath show through. If you look carefully above you can see that some of pixels appear yellow (which is the background color of this site) indicating where the transparency is.

See also this blog entry.

Entries

Cross your fingers and click

Spammers compendium entry - Cross your fingers and click

Whiter Shade of Pale

Spammers compendium entry - Whiter Shade of Pale

Slick Click Trick

Spammers compendium entry - Slick Click Trick

Now you see it; now you don't

Spammers compendium entry - Now you see it; now you don't

The Rake

Spammers compendium entry - The Rake

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.