Featured Article

We all know that botnets are nasty conflagrations of unsuspecting peers, all ruthlessly controlled by bot herders and their C&C servers. And if there’s any one thing that we’ve learned about botnets, it’s that they’re the gold standard for anyone bent on unleashing mayhem on a world that’s become far too reliant on interconnectivity. But up until now, botnets have generally been understood to be prevalent on Windows machines, with Mac and Linux pulling up the rear as newbies to the party. And while it’s true that both of the former platforms have presented themselves as candidates for a career in botism, the sheer number of Windows PCs out there makes Windows the natural platform of choice. After all, that’s what botnets are all about. Numbers.

Androids are People, Too: Botnets not Just for PCs Anymore
   

The U.S., along with Canada, the United Kingdom and several other countries, refused to sign the UN’s Internet Treaty that was ratified by 89 other countries. The treaty, designed to regulate the internet and unite countries in the fight against …

U.S. Reluctant to Sign Internet Treaty Over Spam Control Concerns
   

  Poland has become a lead provider of the world’s spam volume, overtaking China and moving into the top 10. Nearly 3% of the global spam volume comes from Poland. The rising spam numbers are blamed on Polish companies who …

Poland Facing Increased Spam Problem
   

Six Email Security Initiatives for the New Year

As the year winds down, many organizations are looking for new initiatives to bring in the New Year. As email administrators fighting spam and phishing should be at the top of our lists. To effectively protect our users and resources against email borne threats, here is a list of projects that can help your organization better fight cyber criminals who attack you through your inbox.

Six Email Security Initiatives for the New Year
   

What is Google Thinking?

Gmail, that flagship product almost every single one of us uses with either an @gmail.com account or a vanity domain backed by Gmail, is going through what I can only call a series of revolutionary changes that will be bad for many of us.

The number of service changes, realignments, and deprecated features that have occurred this year may spell the end of Gmail as we know it. Why is this bad? Well, in addition to being arguably one of the best free email services available, for many it is also one of the most effective options at protecting users from spam. As they disable services, move options to their for-pay business products, and generally change up the service, they may be driving many of us to other services, whose spam protection may not be as good.

While Gmail has been free for me to use for the decade or more that I have had it, so part of me feels I really shouldn’t complain, I can’t help but feel disappointed that so many things are changing, and continue to change. Let’s review the announcements that have come out in the past year or so.

What is Google Thinking?
   

Like Santa Claus and his cadre of industrious elves, spammers don’t take time off for the holidays. Unlike the jolly old elf and his posse, however, the email-happy scam artists are devious, black hearted little children who deserve giant lumps of coal. This is no truer than this time of the year, when retail sales explode, and the average gift buyer tries to stay ahead of the game by stumbling through the dizzying maze of online shopping opportunities. Online purchases require shipping, and spammers know that, too. So it shouldn’t be surprising, even if it is disheartening, that there are dark souls out there capitalizing on the probability that their targets might have ordered something – perhaps the Clapper or Chia Pet that I clamor for every year and, sadly, never get – and will become the proverbial fly to the spammer’s spider.

That’s why, in the confusing mayhem of the holiday season, anyone who uses email should be aware of the latest scam, this one in the form of a very realistic looking email that appears to come from Federal Express. Being reported by several sources, the bogus email appears to be the real thing, FedEx logo and all, with a notification that the recipient has a parcel they need to pick up.

Capitalizing on the Holidays: FedEx Malware Spam
   

New Spam Campaign Exploits Mobile Phone Companies

 

A new spam campaign is exploiting several mobile phone companies to target users in Australia and Germany. The messages pretend to be MMS messages from popular carriers Telstra and Vodafone, and ask recipients to open the included attachment to read them.

If the recipients open the attachments, malware is installed, and when it’s installed it connects to a remote server and downloads even more malware. The malware takes over the computer, steals personal information, and most likely connects the infected computer to a botnet so it can pump out more malicious spam, and it’s specially configured and encrypted to avoid detection.

New Spam Campaign Exploits Mobile Phone Companies
   

Beware New Phishing Campaign

There’s a new round of spam hitting mailboxes world-wide, and filters seem to be slow to pick up on this. Since most of this new spam appears to be phishing attacks, ensuring your users are aware and know how to recognize these new attacks will be key in ensuring your users and their systems remain secure.

Beware New Phishing Campaign
   

Facebook Wins $873 Million Judgment Against Spammer

  Facebook has won yet another lawsuit against a spammer and walked away with a hefty judgment in their favor, but does anyone care? Even Facebook themselves admit their victory doesn’t mean much and their chances of collecting are slim. “Does Facebook …

Facebook Wins $873 Million Judgment Against Spammer
   

The Difference Between the Phish and the Spam

When discussing email security, the terms spam and phishing often get thrown around interchangeably. There is good reason for this; both represent unwanted email messages and the same tactics can be used to deliver both types of email messages in mass quantities.

These traits, combined with the obvious fact that both are email borne threats, make it easy for someone to lump the two together. However as the sophistication of email borne attacks increase, and the level of threat grows higher, it is important to understand the difference between the two and end the confusion.

The Difference Between the Phish and the Spam
   

Last Comments

  • Mark on Info of Forbes 100 Executives Exposed by Phishing Black Market May 16, 2013

    This is very interesting. As far as I know, those who belong to the upper management are the ones who don't clearly appreciate IT upgrades, investments, and security. After all, they're costly, and somehow, some people below these executives also don't know the value of a great IT system. Now with this news, I'm hoping they'll give online security more consideration.

  • Fred on How Data Mining Can Fight Phishing May 16, 2013

    I hope people who get to read this can remember that data mining can sometimes be a double-edged sword. Though I agree to some extent that it can be helpful in establishing phishing patterns, data mining, when used improperly, can also lead to trouble for the company.

  • Georgie on Do You Know What to Do When You Get Spammed? May 16, 2013

    The first time I received spam, I certainly didn't know what to do. So I ended up opening them and sharing some of them to my friends. You can definitely call me a spam promoter. But I guess you cannot fault me especially since around that time there's not enough information around as even IT experts were figuring out what spam is.

  • Lourdes on Give Your Mother a Spam-Free Mother’s Day May 16, 2013

    This is actually a very thoughtful, sweet post. I know the list constitutes a very odd gift to moms, but then it's also so timely and incredibly necessary. My mom isn't interested with any IT at all. It took her a while before she became accustomed to a mobile phone, and certainly she doesn't have an e-mail address. But if she had been an active user, I'd definitely follow the tips here.