Featured Article

Ransomware Lurking In New Boston Marathon Themed Spam Campaign

A huge new spam campaign is pounding the net with ransomware laden messages. The messages claim to offer breaking news and exclusive videos about the Boston Marathon bombings and subsequent manhunt that gripped the city with fear. Instead the links lead the user …

Ransomware Lurking In New Boston Marathon Themed Spam Campaign
   


It’s no secret that as quickly as we make ways to stop the madness, the spammers are finding ways to pump up the volume. The spam landscape is becoming more dangerous than ever, if that’s even possible, and it seems that the spammers have decided to put their knives and pistols away in favour of anti-ballistic missiles and nukes. Now, if that all seems like hyperbole to you, you’re absolutely right. But exaggeration doesn’t necessarily not make it so, good grammar be damned.

We’ve been reporting for a while now the new sightings of dangerous new spam campaigns, most notably the faux Facebook message that leads you to believe that a friend has tagged you in a photo, and a phony LinkedIn email that tries to suck you into clicking a link to find out why some dude you’ve never heard of is trying to connect with you.

In both instances, the messages are quite convincing. They’re clean and devoid of the obvious stuff that normally tips us off that the messages are from some clown with the language skills of a bearded dragon. They’re personalized, both in the subject line and the body of the message, giving you a name that’s randomized so you rarely get the same message twice. They even give you a little personal information about the fake sender. One recent message comes to mind, where an Anne Johnson, Store Manager at Jos. A. Bank Clothiers, was the ‘sender’. All this, of course, is meant to throw you off your game just long enough so that the itchy little index finger you’ve been clicking with all day falls prey to the centuries-old argument: “shucks, one more click’s not going to hurt nothin’.”

Blackhole Rears its Ugly Head: Facebook and LinkedIn the Tip of the Iceberg
   

Boston Marathon Spam Strikes Australia

  Security experts are warning Australians to beware of a new spam campaign exploiting the Boston Marathon bombings. The campaign, which is sending out messages made to look like news stories about the attacks, delivers a malicious payload. Subject lines such …

Boston Marathon Spam Strikes Australia
   

Malicious Spam Masquerades As HP Printer Notifications

    Hewlett-Packard is the latest big corporation to be brandjacked. A new spam campaign is taking advantage of a feature found in HP printers. The feature lets users scan a document and email it right from the printer. The …

Malicious Spam Masquerades As HP Printer Notifications
   

You know, we’ve heard so much over the past two years about the dangerous new onslaught of malware-ridden spam that was just around the corner, we failed to actually notice that we’ve taken the corner and been driving for awhile now. Threats of black hat spam have got some of use freaked out by the very scientific (and scary) use of data science methods to create entirely believable personas online. Blackhole 2.0 hit the ground running, a nasty little frontend for anyone who wants to mess up your day by dumping payloads that would shame an African elephant.  Botnets like Zeus and Cutwail are alive and well and wreaking mayhem at a computer near you. And the rise of social media spam and new threats on iOS and Android devices leaves us with an uneasy suspicion that the spammers actually have a strategy. Hmm.

Spam More Dangerous than Ever
   

New Spam Campaign Warns of War With North Korea

  A new spam campaign is using an old technique – fake news stories. This time they are taking advantage of the rising tensions between North Korea and the rest of the world, specifically the United States. The subject line …

New Spam Campaign Warns of War With North Korea
   

Can Training Your Users Help Make Your Spam Filter Better?

Many people who work in IT often look upon training users as an exasperating experience. Conversely, users often view training programs as a boring waste of time. When both sides take this approach, if often results in a self-fulfilling prophecy.

However training users how to spot illicit email messages can be something that pays off in the long run, if the training program is done right.

While this article is not going to tell you how to develop a training program for identifying spam, it will help to encourage you and your management by showing what the benefits to a solid, meaningful email security training program can be.

Can Training Your Users Help Make Your Spam Filter Better?
   

Hate spam all you like. Despise spammers even more, but you have to admit that they’re resilient and darn it all, they’re downright wily. You’ve probably seen it all in the bowels of your server rooms, spam filters full of some of the worst stuff these jerks can throw at you. Most days, you probably feel like you need a shower every time you review it. You’ve committed to memory every stunt, every devious little attempt to circumvent, every clickable bomb, as a what not to do manual for the righteous. You’ve seen it all and you know it all. But do your staff?

It’s a safe bet that most of us are so busy dealing with the day to day mundaneness of life in the modern Orc forges known as IT departments, that we don’t really stop to consider just how well-armed our front lines are. Remember, one errant clicker may open up your network like a broadsword cutting down a soldier and opening the line for the enemy to enter.

So how many of you actually have a spam tactics manual? Hopefully, you’ve all answered in the affirmative, but of all the information that new employees receive on their orientation day, it’s a safe bet that they are sadly lacking in some fundamental training that could mitigate serious threats to the organization.

In fact, as we speak, new spam attacks are rampant, and they’ve become even more devious than ever. They’re so good, in fact, that it’s a cinch they’ll make it through the best spam filters. And to the untrained eye, they could be the click-candy that spells out devastation for you and your organization. And, if what we hear is true, things are getting much worse. These are serious enough threats that it merits a general staff sitdown, if you haven’t had one recently. There are new threats occurring every day, so hopefully this article will be a primer that you can use to implement your organization’s spam tactics manual.

Now It’s Personal: Devious New Spam and Getting Your House in Order
   

Android Malware Being Spread By Cutwail Botnet

The Cutwail botnet, one of the largest of its kind, has a new bag of tricks up its sleeve. Security experts have discovered it’s sending malicious spam that’s distributing Android malware. The messages, which look like notifications from the IRS …

Android Malware Being Spread By Cutwail Botnet
   

A Brief History of Spam – The Internet’s Most Wanted

Welcome back to our series on everyone’s favourite inbox contents, spam. In today’s post, we’re going to take a look at a veritable rogues’ gallery; a collection of charlatans, cheats, and knaves; a book of blackguards, scumbags, and scallywags; the list of the Internet’s Most Wanted. These are the bottom ten worst of the worst, the most offensive, the lowest of the low. These are the individuals most responsible for the majority of spam hitting your inboxes every day. They are as bad as a banana with a greasy black peep, and are as charming as an eel. They are, in a word, spammers. Most of them are individuals whose names and locations are known, but that doesn’t mean the law can do much if anything about them. For all the time and effort it takes for us all to deal with spam, it most countries it is not illegal, and in those where it is, these individuals steer clear.

A Brief History of Spam – The Internet’s Most Wanted
   

Last Comments

  • Chuck on Schoolchildren Use Phishing Scam to Take Over Computers May 20, 2013

    I really don't know how or what to make of this story. On the one hand, I am glad to know that kids these days are more brilliant when it comes to PCs or anything related to technology. On the other side, I am deeply saddened they're using such intelligence for the wrong reason. I have to attribute the issue with being young, but I'm hoping they'll be corrected immediately.

  • Angie on Do You Know What to Do When You Get Spammed? May 20, 2013

    Definitely, when I first started using the computer and e-mail, I had no idea how to deal with spam, though I think I was smart enough not to open a lot of them. With websites such as these, I became more empowered, and over the last few months, I received less spam.

  • Lennard on Give Your Mother a Spam-Free Mother’s Day May 20, 2013

    This is not really related to Mom but to Dad, but since both are parents, my story counts. Anyway, I bought Dad a nice cool PC on his 65th birthday. A few months after, he called me up, telling me that the computer I gave him was slow. I went to check it and realized it's loaded with malware. I asked him if he's been opening malicious websites, and he mentioned he checks everything. To make my story short, he was incredibly happy when I installed the right software and cleaned his PC. I think his joy was more than the worth of the PC I gave him.

  • Margaret on Pump and Dump Spam is Back May 20, 2013

    I am not a stock investor, but I heard about penny stocks, and based on some of the articles I have read, they are not completely "illegal" or, as you put it, "worthless." However, I have to say they are the most prone to value fluctuations or considerable loss. I have never encountered spam related to that, but I do think it's a very clever idea, considering more people are investing their money on stocks.