The shutdown of McColo Corp. last year reduced spam by about 75 percent, but Postini says it's coming back.
Just a few months after the shutdown of a Web hosting company responsible for an estimated 75 percent of the Internet's mind-boggling daily spam tally, the numbers are right back up where they were, according to a report from Postini, which provides e-mail security to 15 million users of Google's enterprise services.
And it's growing faster than ever. Spammers seem to be diversifying their distribution strategies to dodge attempts to thwart them.
McColo Corp., a San Jose, Calif.-based Web hosting company, was notorious among security experts for the numerous and hyperactive spammers on its client list. At the height of its activity, Google Enterprise was intercepting up to 100 spam messages a day for each Google business e-mail user, and 60 to 70 on an average day. After McColo's Internet service providers pulled the plug in November, responding to pressure from Washington Post computer security blogger Brian Krebs those numbers plunged to around 25 a day, but they've been creeping up ever since and are now into the 60s. Overall spam growth is the highest it's ever been, increasing 1.2 percent a day in the first quarter of 2009 (compared with 1 percent a day in the first quarter of 2008, which was a record at the time).
"It's difficult to ascertain exactly how spammers have rebuilt in the wake of McColo, but data suggests they're adopting new strategies to avoid a McColo-type takedown from occurring again," commented Amanda Kleha, of the Google security and archiving team, in the report. "Specifically, the recent upward trajectory of spam could indicate that spammers are building botnets that are more robust but send less volume -- or at least that they haven't enabled their botnets to run at full capacity because they're wary of exposing a new ISP as a target."
Greater volume isn't the only worrisome development. The report also noted a spike in spam messages carrying viruses, with a ninefold jump between February and March. Things were even worse in this arena last summer, Kleha notes, but the trend is worth watching. The "blended threat" -- an e-mail that sends users to a Web site that infects their computers -- has been particularly popular, especially through e-cards. Valentine's Day saw a flurry of this type of activity.
Kleha says the most significant new variety of infectious spam is location-based: a message with breaking news of some horrific event in the big city nearest to the recipient's home area (based on IP address). The link leads to a page with a fraudulent news story and an embedded video that downloads a virus.
Virus-laden spam used to spike every Sunday, possibly to take advantage of corporate system downtime, but the most recent Google stats show that they're spread throughout the week with no obvious pattern. "One possible explanation is that spammers switched tactics because they weren't seeing the success they'd hoped for from the focused attacks," Kleha notes.
This Year's Premier Digital Marketing Event is #CZLSF
ClickZ Live San Francisco (Aug 11-14) brings together the industry's leading practitioners and marketing strategists to deliver 4 days of educational sessions and training workshops. From Data-Driven Marketing to Social, Mobile, Display, Search and Email, this year's comprehensive agenda will help you maximize your marketing efforts and ROI. Register today!
The Marketer's Guide to Customer Loyalty
Customer loyalty is imperative to success, but fostering and maintaining loyalty takes a lot of work. This guide is here to help marketers build, execute, and maintain a successful loyalty initiative.
The Multiplier Effect of Integrating Search & Social Advertising
Latest research reveals 68% higher revenue per conversion for marketers who integrate their search & social advertising. In addition to the research results, this whitepaper also outlines 5 strategies and 15 tactics you can use to better integrate your search and social campaigns.