The Spam Cryer » Uncategorized

Gmail users are reporting a huge spam surge

Shaun — Fri, 26 Jun 2009 19:46:24 +0000

A lot of GMail users have been angered by a lot more spam than they were used to – reaching their inboxes.

It seems to have been going on for several weeks, but in the recent few days it’s apparently been getting much worse. Our CudaMail service has seen an increase in that type of spam recently as well. We’ve put some filters in place fortunately, but there has definitely been an increase.

A lot of it was the “SEO Google first page rankings” type.

IRS stimulus Phishing scam

Shaun — Sat, 07 Feb 2009 00:09:08 +0000

US-CERT Current Activity

IRS Stimulus Package Phishing Scam

Original release date: February 6, 2009 at 10:03 am Last revised: February 6, 2009 at 10:03 am

US-CERT is aware of public reports indicating that phishing scams are circulating via fraudulent U.S. Internal Revenue Service emails offering users stimulus package payments. These emails include text that attempts to convince users to follow a link to a website or to complete an attached document. The website and document request that the user provide personal information.

US-CERT encourages users to do the following to help mitigate the risks:

* Do not follow unsolicited web links received in email messages.
* Refer to the Recognizing and Avoiding Email Scams (pdf) document
for more information on avoiding email scams.
* Refer to the Avoiding Social Engineering and Phishing Attacks
(pdf) document for more information on social engineering attacks.

Relevant Url(s):

====

This entry is available at: http://www.us-cert.gov/current/index.html#irs_stimulus_package_phishing_scam

Lance Atkinson only fined $63,400 USD by New Zealand because he ‘co-operated with authorities

Shaun — Tue, 23 Dec 2008 19:22:11 +0000

Lance Atkinson, a prolific spammer since 2005 as part of ‘HerbalKing’ the ‘#1 worst spam gang of 2007, 2008′ according to the Spamhaus ROKSO list has been fined only $92,715 AUS (about $63,400 USD) by authorities because, according to Justice Christine French of the High Court in Christchurch, of the co-operation and candor of Lance in the early stages of the investigation.

This is in contrast to the 2.2 Million dollar USD fine assessed against Atkinson by the FTC in 2005.

The Spamhaus article points out that Australia has very strict anti-spam laws
(http://scaleplus.law.gov.au/html/ems/0/2003/0/2003092501.htm) and the maximum fines for a ‘body corporate with a prior record’ could be as high as 1.1 million (AUS) or $220,000 (AUS) for ‘a individual with prior record’, just for sending the spam messages.

If you add in the maximum fines for not including accurate sender information ($550,000 corporate / $110,000 personal) for not having a functional unsubscribe facility ($550,000 corporate / $110,000 personal) and supplying, acquiring and using address-harvesting software or harvested-address lists ($550,000 corporate / $110,000 personal) these fines could have been much higher for Lance.

Sydney Morning Herald.
http://www.smh.com.au/news/technology/security/kiwis-nail-big-time-spammer/2008/12/22/1229794316883.html

Herbal King
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK7802

While this is great that Lance has been fined if we take a step back and look at the bigger picture we have to ask. If fines worked why didn’t Lance and the whole Herbal King group stop spamming in 2005?

While the laws applied in this particular case are very strict they have not stopped the flow of spam. It looks like one solution may be to add confinement in addition to the monetary fines for repeat spammers with additional time for repeat offences similar to how other criminals are treated.

While the botnets are very automated and will continue for a while after the masters are incarcerated eventually with no new commands the botnets will go dark.

But what do I know? Your thoughts on this issue?

- Shaun