16 August 2005

 

Sophos Identifies the Most Prevalent Spam Categories of 2005

Sophos Identifies the Most Prevalent Spam Categories of 2005
Pump-and-dump stock scams increased while porn spam decreased over last six months
Lynnfield, MA - infoZine -While emails peddling snake-oil meds and low-interest loans continue to irk computer users and clog corporate networks, dangerous new categories of spam are becoming more prevalent according to Sophos, a global leader in network security, which today published the results of its research on the most prominent spam categories during the first six months of the year.Researchers from SophosLabs™ analyzed the spam received in its global network of spam traps. Sophos experts found that "pump-and-dump" stock scams are on the rise, and unsolicited pill or medication email, including generic or non-brand name versions of Viagra and other pharmaceuticals, accounted for more than 40% of all spam traffic.The top five spam categories spanning January 2005 through June 2005 are as follows:
"Over the last six months, we've seen medication and mortgage spam retain their notorious ranking atop the spam charts, while unsolicited pornography, though still accounting for about 10% of all spam, is slipping downward," said Gregg Mastoras, senior security analyst at Lynnfield-based, Sophos. "The most interesting development, however, is the increased volume of stock scam spam, representing a new financial threat to somewhat naïve online investors."Sophos's analysis shows that, during the first half of 2005, the volume of stock scam spam has increased at an average rate of 10% per month."The purpose behind the pump-and-dump stock racket is to quickly and cheaply disperse false information about a company's stock, along with information obtained from recent press releases, to potential investors via email," Mastoras explained. "Typically targeting microcap companies stock, once these fraudsters dump their shares, and then stop advertising the stock, the price often falls, and investors ultimately lose their cash."Pump-and-dump campaigns tend to run for short durations, keeping overall volume low. Even though some of the information provided is accurate, the deceptive and unsolicited nature of the messages qualifies them as spam. The majority of stock scam spam campaigns employ obfuscation techniques, using word variations such as "st0ck" or "stox" to avoid being caught by spam filters. Messages can arrive in many different formats, such as HTML or plain text, and are almost always sent via hijacked PCs known as zombies."Social engineering through email, where scam artists take advantage of unsophisticated computer users, is on the rise and represents a dangerous trend," said Brian Burke, IDC Research Manager. "Stock scams, combined with traditional phishing techniques, can result in significant financial loss for victims of these swindles."Sophos recommends that the most effective way for businesses to reduce spam and other threats is to adopt a multi-layered defense as well as implement a best practice policy regarding email account usage. Users can also learn how to best minimize the influx of unwanted email by following a few simple guidelines.

Comments: Post a Comment

<< Home

This page is powered by Blogger. Isn't yours?