Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

From what sources do email spammers get their addresses?

Wikipedia mentions the following:

  • Harvesting email addresses from publicly available sources.
    • This includes web pages (web crawling), usenet posts, mailing list archives, DNS and WHOIS records
  • Guessing email addresses (directory harvest attack)
  • Asking people for their emails for one purpose, such as jokes of the day, and selling the email addresses elsewhere
  • Getting access to people's address books (which Quechup utilized)
  • Scanning an infected computer for email addresses.

Are there any other techniques used? Are any of the techniques above now obsolete?

share|improve this question – barlop Mar 6 '11 at 0:23
@barlop: I noticed that web site, but the information may be a little outdated. The bullet points from February 9, 2006 are the same as for today, and it was first written in 1999. – Andrew Grimm Mar 6 '11 at 0:38
up vote 1 down vote accepted

You named some major ones. Another one you didn't really mention was companies that sell lists of addresses to other spammers. I think this is actually a big part of the problem and is something that is very hard to do anything about. There are also people just generally selling lists to people who want to try their hand at spamming and those people usually don't care where they got the addresses from or if those people have done business with them before or not.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .