Politik spams

07 August 2008 - 08:25 PM | Permalink

A few news sites and blogs have been discussing the news that John McCain's website encourages supporters to submit their endorsement of McCain in the form of comments on a selected list of political sites. The site offers some daily suggested ‘talking points’ that supporters can use, and in return for diligent comment-spamming, the most prolific posters stand to earn various McCain-themed rewards.

Continue reading 'Politik spams'

Potash Corp

31 July 2008 - 08:23 PM | Permalink

Almost all stock spam consists of pump-and-dump spam, where the seller tries to 'talk up' the price of a stock. Spam spreading negative information about a stock in the hope of making the price fall — a practice known as short-and-distort is very rare. Similarly, most stock spam relates to smallcap or penny stocks, which trade at low prices, allowing spammers to make quick profits by buying large quantities inexpensively. Stocks listed on the major exchanges, which are less susceptible to manipulation, are rarely seen.

Continue reading 'Potash Corp'

Eddie Davidson

25 July 2008 - 10:00 PM | Permalink

This week's leading spam-related story may be that of convicted spammer Eddie Davidson, who escaped from a minimum-security federal prison on July 20th, and then killed himself and two members of his family. Davidson was serving a 21-month prison sentence for tax evasion and offenses under the CAN-SPAM Act. Among his other activities, he allegedly sent spam on behalf of the Useltons.

Continue reading 'Eddie Davidson'

85,000

22 July 2008 - 07:09 PM | Permalink

Hell hath no fury like a marketer duped. A company called Javelin Marketing has posted a press release in which they claim that an email list vendor sold them a 100,000 address mailing list with an 85% bounce rate. According to Javelin, the list cost them $14,000 and the massive wave of non-deliverables led to their email hosting service canceling their account. Ouch.

Continue reading '85,000'

Storm drops the dots

05 July 2008 - 08:39 AM | Permalink

As mentioned yesterday, the Storm worm has been sending 4th of July-themed spam. I commented then that the worm gives itself away by using dotted-IP notation in the URLs it sends. It seems that the developers are aware of this weakness: the latest run of Storm worm spam uses actual domain names.

Continue reading 'Storm drops the dots'

There's life in the old worm yet

04 July 2008 - 11:56 AM | Permalink

Lately, a malware newcomer has been getting all the attention, with claims that Srizbi may have assembled the world's largest botnet. However, the Storm worm is still out there, and predictions of Independence Day spam sent by the Storm worm have proven correct.

Continue reading 'There's life in the old worm yet'

In Soviet Russia

30 June 2008 - 06:37 AM | Permalink

Some spammers apparently have a sense of humor. Some of our spam traps were recently hit with a run of test messages with the subject line:

in sov r bot test you

The spamtrap addresses affected were originally 'scraped' by spiders running on servers rented from Everyone's Internet/EV1Servers, and gather the usual mess of penis enlargement, pills and fake watch spam.

Using a distinctive test message rather than simply sending out another batch of pill spams would make sense if spammers were collecting bounces in order to eliminate undeliverables from their spam lists. This doesn't seem to be the case, however: the 'From' addresses on the messages use randomly-generated addresses at other people's domains, so there's no way for the spammer to collect the bounces. They could monitor the actual SMTP transaction — but then there's no advantage to using a distinct test message. It's therefore likely that the messages are no more than they appear to be: simply test data used for checking a botnet or trying out a new email module.

Something old, something new

29 June 2008 - 06:56 AM | Permalink

After a fairly sharp decline from last year's high, there are signs that stock spam might be creeping up again. We've noticed a slight uptick in the number of symbols advertised, although volumes remain well down. What's interesting is that the new stock spammers appear to be exploring some new tactics.

Continue reading 'Something old, something new'

Blocking SMS spam

13 June 2008 - 07:07 AM | Permalink

One type of spam that I've been spared so far is SMS spam, where spam messages are sent directly to your cellphone (often very expensive for the recipient). Stock spammers in the US often use SMS spam, while in places like China it's already a huge problem. In Britain, two-thirds of cellphone users have received SMS spam.

Continue reading 'Blocking SMS spam'

Future shock

09 June 2008 - 01:00 PM | Permalink

Jonathan Zittrain, co-author of an excellent study of stock spam, has just released a book called The Future of the Internet - And How to Stop It, available both on paper or as a Creative Commons-licensed download.

The book isn't primarily about spam, but any discussion of the future of the Internet — which Zittrain sees as potentially bleak, by the way — must necessarily cover the topic. Zittrain outlines the problem and then talks about responses to the problem in the form of open collaborative grassroots projects. I haven't had time to do more than skim it, but it looks like it might be worth a read, if only as a possible source of new ideas and a way to look at spam as an instance of the larger problems facing the Internet.


weblognewsstocksstatstoolsnoteslinksmisc