Q & A: The Daily Fight Against Spam
304779
I spend 10 to 15 minutes a day adding addresses to my âblock sendersâ list. Is there any way I can block all of these at once and report them to some entity?
33039
If you thought nobody could get more spam than you, think of Bill Gates. The chairman of Microsoft (MSFT) gets 4 million pieces of e-mail a day, most of it junk, says Steve Ballmer, Microsoft&#39;s chief executive.
108329
Q A couple of times in the past month, my e-mail address has been hijacked and used to send out spam. One day, I opened my mail to see more than 100 returned messages, all of which were using my e-mail to send spam! How can I prevent this?
707033
A variation of spam is sliding past spam filters into inboxes, but it&#39;s not likely the new trick will be successful much longer, a security expert said Thursday.The spam messages, urging recipients to buy a stock, have an MP3 audio attachment but no subject line or text, said John Graham-Cumming, an anti-spam consultant and researcher who is based in France.&quot;I think this is the first time we&#39;ve seen this,&quot; said Graham-Cumming, who tracks new kinds of spam.The audio messages, which vary in length, contain a warbled, robotic voice with a British accent encouraging people to invest in Exit Only, a company that owns a Web site, www.Text4Cars.com, which connects vehicle buyers and sells through SMS (Short Message Service). Exit Only says it&#39;s not involved in sending the spam.Graham-Cumming said the spam falls into the category of &quot;pump and dump&quot; fraud. Scammers invest in a company with a low-priced stock and send out a round of spam, causing gullible investors to buy it and increase the stock&#39;s price.As the stock price peaks, fraudsters cash out, which causes the stock to precipitously fall, burning other investors. The practice is illegal.Exit Only was trading around $0.41 on Thursday. Not much detail is available on the company, but it issued a news release on Tuesday heralding the launch of its Text4Cars service in the Los Angeles area. The news release said the company hoped to be fully launched in the United States in early 2008.Exit Only&#39;s CEO, David Dion, said he learned of the spam around Wednesday morning. He has since notified the U.S. Securities and Exchange Commission and said his company has nothing to do with the spam run.&quot;I am very distraught by this,&quot; Dion said.Dion said only about 100 shares have been traded so far, so the scam hasn&#39;t been successful.The messages are more annoying than harmful. But there are a variety of defenses e-mail administrators and security companies can employ to stop it, Graham-Cumming said.Spam filters can be configured to cull messages with MP3s, since most companies don&#39;t have a business use for the file type, Graham-Cumming said. Administrators can also change their e-mail server settings to slow down the speed at which they receive messages with MP3 attachments, he said.That method has been proven to frustrate spammers, who typically shut down the connection if the spam isn&#39;t going through quickly enough since the delay consumes valuable bandwidth, Graham-Cumming said.These spam messages are also relatively large -- around 100KB -- compared to other spam, which may be another reason this kind of spam may not be around for long. Spam messages with larger file sizes require more bandwidth to send, meaning spammers can&#39;t send out high volumes of messages, Graham-Cumming said.&quot;Honestly, my prediction is this is going to be around for a while and disappear,&quot; he said.E-mail security company MessageLabs said it was catching about 10,000 spam messages with MP3s per hour since late Wednesday night.
636248
A spammer whom authorities say e-mailed more than 9 billion unwanted advertisements for products like erection pills faces a hefty fine: If he needs headache medication or debt relief there's probably an unsolicited ad in his own inbox.
18983
According to a new report by Deborah Fallows at the Pew Internet & American Life Project, the percentage of people who think that spam is increasing has risen steadily. Nonetheless, the Pew report also found that spam is less bothersome to e-mail users than it once was.
492291
So you think you get a lot of spam, maybe a few hundred per day? Well think about the amount that bill gates gets at Microsoft, over 4 million a day apparently!
184755
Coimbatore: Have you noticed a rise in the number of unsolicited junk e-mails or spam in recent days? Most Net users would have, particularly after a holiday or when the system had remained shut for a couple of days.
96436
Lycos vigilante attack on spammers has been hit by a vigilante attack. Spammers are suspected.
550973
Spammers are a key adopter of a technology meant, in part, to fight spam.
579044
Spam messages are increasingly plaguing e-mail inboxes, but more Americans are accepting them as a fact of life, a new study finds.
700152
By Cynthia McMullen  Last week, I received nearly 700 e-mails, give or take a few spam.  That's a joke; spam accounts for nearly 90 percent of the e-mail I receive at work. And I don't mean the Hormel meat product, Spam, for whom unsolicited commercial mail was named.
373798
DECEMBER 29, 2004 (IDG NEWS SERVICE) - America Online Inc. has declared 2004 a &quot;banner year&quot; in its fight against spam. Spam reports from AOL&#39;s members fell from a daily average of almost 11 million in November
296563
Bill Gates is claiming the most spammed person in the world. Microsoft Corp. Chairman receives 4 million spam messages in his email every day, according to his silent voodoo doll Steve Ballmer.
328278
Opinion: Already we&#39;re hearing it, that spammers are beating SPF and the other authentication systems. But the truth has always been that authentication is only a tool for anti-spam systems to use.
594242
(InfoWorld) - Computer security analysts who fight spam face the same thankless task as goalkeepers: They don't get much credit for the unsolicited e-mail they stop, only demerits for the ones that get through. But those few messages thatÂ wriggle past increasingly sophisticated filtersÂ constitute the greatest threats on the Internet. The messages range from relatively harmless pitches for human growth hormones to ones with malicious code attached that could steal passwords or documents from a machine. TheÂ sheer volume of spamÂ still threatens to bring the Internet to a crisis point. Up to 90 percent of all e-mail traffic is spam, a figure that has crept upward in recent years. The forecast isn't good, either. "We see spam just going up to the point where Internet servers start having difficulty," said Steven Linford, chief executive officer of Spamhaus, a London nonprofit organization that generates a list used by technology companies and organizations running e-mail servers to block spam. "Spam will tend to increase to where it will be 99 percent of all e-mail on the Internet," he said. "At that point, governments will start to take notice." The front line of defense for most computers connected to the Internet is anti-spam software that tries to determine whether a message is legitimate. Anti-spam software uses a number of methods to make that decision. The software can block messages coming from a particular IP (Internet Protocol) address of a computer known to send spam. Messages containing links to potentially harmful Web sites can be halted using URL (uniform resource locator) filtering. Security vendors can tweak special "rules" for their anti-spam engines, such as blocking messages containing certain kinds of text identified as common to spam. Anti-spam software usually aims to filter out 98 percent of bad messages -- any higher level of filtering tends to snag real messages and cut off critical business communication. So spammers are aiming for the narrow, 2 percent window -- and even in the last few months have honed new methods to hit the inbox bull's eye, experts say. Sophos, one of many security vendors with anti-spam software, has analysts stationed at four labs -- in Abingdon, England, Vancouver, Boston, and Sydney -- watching the Internet 24 hours a day, seven days a week for threatening spam and malicious software. Sophos' lab in Abingdon doesn't look much different from any other office. But it's mission control for security analysts with special rules: no computers or electronic equipment can be brought inside, and the room remains locked. While Sophos catches hundreds of new malware and spam samples a day, many can be stopped immediately using software if the samples show similar characteristics to known problem code. New, unique ones are prioritized and doled out to researchers for inspection, and Sophos quickly updates its software to block them. "We're unusual in the respect that we like to receive spam," said Mark Harris, director of the lab. That's because spam does leave a trail, albeit one that's often a confusing series of hops between servers around the world. But those clues are enough to block it. Sophos catches spam in "traps" -- abandoned e-mail addresses and domains that have been donated for the purpose of spam research. Messages sent to those addresses are invariably spam, the first clue a message is garbage. On a recent day, Paul Baccas, a spam research analyst, pulled duty. A message entitled "Let's go" caught his attention after it landed in a spam trap of addresses monitored by Sophos that belonged to a telecommunications company that went bust six years ago. Machine analysis ranked the message as likely being spam, but the filter let it through.Â Human analysis revealedÂ it wasn't a legitimate message. Deeper investigation showed a tangle of false information peppered with international locales. The message contained a link to a Web site selling "human growth hormone," a product advertised recently through spam aimed at U.S. users, Baccas said. The Web site was registered with a hosting company in Hong Kong less than an hour before the spam message was received by Sophos, Baccas said. It was registered by a person in Detroit according to the whois data. It's uncertain whether the registered name is real, according to Graham Cluley, chief technology consultant for Sophos. The state abbreviation in the whois database, however, was incorrect. A call to the phone number listed found it disconnected. Adding to the ruse, the return address for the spam message contained a ".pl" suffix, indicating it came from Poland. But that information is also easily faked. "Basically, he's sent an e-mail to a company that hasn't existed in six years within 45 minutes of him registering the Web site," Baccas said. "That's very suspicious." The approach is one in a rich bag of tricks spammers employ to beat security software. Lately, analysts have noticed a sharp uptick in spam messages with images containing words, which can defeat text analysis. Another method spammers use is adding or subtracting just a few pixels in every image, which to a computer makes the message look unique and good. To defeat optical character recognition (OCR) technology -- which can read words embedded in images -- spammers introduce colored pixels to create image noise. Humans, for example, can make out a letter "C," but a machine begins to struggle if the technique is used, said Simon Heron, director of operations for security vendor Network Box Corp. It's the spammer equivalent of using hairspray on a license plate to confuse a speed camera, which also uses OCR, he said. "Basically, they've got a little program which is actually able to generate a slightly different e-mail each time even though the picture to the human eye looks absolutely identical," Heron said. But the spam fighters aren't giving up. In the next two weeks, Spamhaus is planning to roll out a new approach to halt the number of "zombie" machines sending spam. Zombie machines are ones that are remotely controlled by hackers and used to send spam. These machines -- scattered around the world in shifting networks called "botnets" -- are a huge component of the spam problem. Spamhaus' Policy Block List (PBL) will block large ranges of IP addresses of end-user computers that should be using their ISP's (Internet Service Provider's) servers to send mail, Linford said. Most computers on the Internet that are directly sending out e-mail are spammers, he said, although Spamhaus has a mechanism for incorporating exceptions. The ISPs will submit lists to Spamhaus, which will push them out to those that use its list to block spam, including businesses such as Sophos and Microsoft. "It's an arms race with spammers," Linford said. "It [the PBL] will certainly be an extremely good weapon." But he's not sure for how long. "Obviously, by this time next year, the spammers will have found a way around it," Linford said.
207311
Spam mail has become one of the biggest problems on the Internet; it consumes precious bandwidth, wastes computer resources, and causes huge financial losses to corporations.