[ insider_reports_insider ] Spam Spikes Big In May
SecurityProNews Staff Writer
2009-05-26
Insider Reports RSS Feed
Over 90 percent of corporate email is spam, according to MessageLabs, reflecting a five percent increase over April. Security researchers peg the popularity of webmail and social networks, as well as CAPTCHA-breaking bots, as the chief catalysts for the recent spike.
 | | Spam Spikes Big In May |  |
Employed Americans are the chief targets of spammers, fueled in part by the idea American white-collar workers are more affluent (and perhaps more gullible?) than international counterparts; that the most active spammers are US-based is another, perhaps more likely, explanation for why spammers appear to be more active during US working hours.
This attractive workforce is also increasingly making use of webmail and popular social networks. Webmail is arguably less secure than work-provided email or ISP-provide email. But also, as Hotmail, Gmail, and free services like them become more widespread, spam filters are less likely to flag addresses as known spam addresses. Universal access also makes them hacker targets-a simple dictionary attack is often all that is needed to crack an account.
Social network spoof emails have become a popular means of getting into email boxes. Emails appearing to be from Facebook, for example, are often trusted automatically by filters and recipients alike. Thinking the messages are from friends on social networks, targets often follow embedded links to spam sites.
MessageLabs suggests the spam spike May could also have to do with expected new CAPTCHA technology Google has now released. Bots became adept at breaking text-based CAPTCHAs, but the new form requires human interpretation of images. Spammers may have upped the spam output in anticipation of more difficult to crack CAPTCHA.
Most of the spam, nearly 58 percent, was sent by known spambots around the world. Donbot wins the label of most active spambot, responsible for 18.2 percent all by itself, followed Rustock and Bable, accounting for 20 percent together, and botnets Cutwail and Xarvester, which sent out 10 percent combined.
MessageLabs' full report can be downloaded in PDF format.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|