Slashdot Mirror
Writing Viruses for Fun and Profit
JMPrice writes "There's a short
article over at zdnet that explores a future synergy between viruses and spam, i.e. international crackdown on spam and open relays makes spammers opt to use infected computers instead as relays, and speculates a relationship between the virus writers and spammers."
Has it really become harder for spammers to remain anonymous ? Anyways, if it was really for spamming purposes the virus would just start open relaying.
future synergy between viruses and spam
Sounds like something out of Dilbert... time load up the Bullfighter.
Are you local? There's nothing for you here!
Any spammer using this technique will be entering the realms of cyber-terrorism, and will be liable for a big prison sentence and dedicated criminal investigations. Given that spam is advertising, it probably wouldn't be very hard to track the perpetrators down once the appropriate warrants are issued. I predict that either this report is overblown, or a few spammers will end up getting the buggering they deserve in prison.
If I seem short sighted, it is because I stand on the shoulders of midgets
Seriously, how many spammers make enough money to be able to pay virus writers any decent sum for their work?
Any biologist will tell you that in an environment where there is only one type of organism, any infection that they are susceptable to that comes along will have catastrophic effects. To avoid this you need diversity. In computing the problem with having windows/intel as the vast majority is that any attack that targets that is going to cause a lot of trouble. Standards that have been implemented on many platforms and architectures are what is needed but that goes against Microsoft's desire for control of everything. However, that desire is doomed to fail because if they fail to take control they fail and if they win complete control they fail because of the lack of diversity.
it is good to have lots of operating systems and processors out there, anything else would be suicide. With proper diversity we could control both the virus and spam problems.
"I have the attention span of a strobe lit goldfish, please get to the point quickly!"
I see that the Senoir Associate Editor wrote this piece. That may explain the embarrasingly outdated technology quotes, like One reason for this success is that the latest variants include Zip files, but with reference to the foolproof quote, what I'm inclined to believe is that the makers of ZoneAlarm paid for this sort of tripe (advert on the article). Brown Envelope journalism at it's best !
"I am not bound to please thee with my answers" [William Shakespeare]
The problem is that we are trying to catch spammers, instead of people who sell the very advertised products and services. Just follow the money, people. That way it won't matter how well spammers hide their identity. It all works because someone gets the money, which is absolutely trivial to track. If few CEOs went to jail because their companies' products were in spam, I'm sure other CEOs would at the very least stop to think about it. It is really that simple.
Karma: Positive (probably because of superiour intellect)
The spam was being generated from multiple locations simultaneously, and from IP addresses that looked like standard ISP subscribers, mostly in the US and Western Europe. It looks suspiciously like the spam was being sent from Trojanised PCs.
Bearing in mind that the people most likely to want to force Doxdesk.com off the web were browser parasite writers, it seems to me that there is a definite link now between these parasites, certain viruses/trojans/worms and spammers. Just another bit of proof that these people have no respect for the law.
Never email donotemail@WeAreSpammers.com
It's difficult to see how spammers could remain annonymous. At the moment, they're an annoyance, but if they enter the realm of law-breaking to this extent, it is likely that there will be a major crackdown. And this shall not be difficult, because of the very nature of spam -- to get you to buy a product. Therefore, there must be a link to the spammer.
It won't work.
((lambda x ((x))) (lambda x ((x))))
This has been the consensus at SPAM-L for quite some time. You might want to subscribe.
Google for SPAM-L's FAQ
Please note, in order for Outlook 20X6 to operate properly, you must first place this workstation on your DMZ for no less than 15 minutes, in order for it to receive IMAP7NukeViagraHGH.D@MM
This will allow you to have a high speed, reliable, DRM'd Microsoft Email eXPerience! (tm)
"Draco dormiens nunquam titillandus."
Some Spammers=Some Hackers
Today's court ruling in favor of the ISP Earthlink vs Spam Ring Leader Howard Carmack got me to thinking.
Are ALL Spammers doing it for a profit? I find that many to most SPAM emails I receive in my inbox have unresolved links. Meaning; you can't "take advantage of the DEALS you are getting". (not that you'd necessarily want to) What would be the purpose of sending out emails such as this in great quantity, and using the man hours, hardware, etc to do it?
I think it may have to do partially with "the hacker mentality" Not all hackers do things for the common mythical reasons we like to think they do. (Revenge on the corporate world, profit, fame) - they do it because they can and a lot do it because they are mentally obsessed with it.
This was the attitude of a former colleague of mine that was hacker. He came from a rich family, was very well known in the community, and had a 1000 easier ways to get what he was wanting accomplished. He was obsessed first of all with hacking, second doing it with a Macintosh, and 3rd just because he could.
I'm not alluding to hackers having a mental problem, nor really comparing hackers to spammers.
This ruling, just made me think of motivation. Maybe if we can tap the motivation for Spammers, then maybe we can come up with the solution.
Yell & scream & rant & rave... it's no use... you need a shaaaave ~ Bugs Bunny
And the simple gaping flaw in this ingenious solution is that I can now drive you out of business by spamming with your contact details.
Nice try.
++ Say to Elrond "Hello.".
Elrond says "No.". Elrond gives you some lunch.
While being anonymous for anonymity's sake isn't very hard to do, it is hard for a spammer to remain anonymous and be effective at the same time. These people are selling products, at the very least they can be traced to the guy who paid them to send the spam.
Buy our new penis enlargement pills!
Available at... errr... go figure
While ISPs are not to blame for this problem, ISPs are in the position to correct this problem. This is not about fixing blame, it is about fixing the problem. Keep that in mind.
Now, as I've said in previous posts about this sort of thing, it all boils down to preventing the spread of infection - mathematically, if the expected value of the number of hosts infected by any given host is greater than one, then the infection will be much like a supercritical mass of fissionable material. So the trick is to reduce the expected value to less than one.
Now, there are plenty of ways to do this, most of which involve the ISP taking some action.
In short, take responsiblity for FIXING the problem, and force your downstream customers to do the same.
I have been receiving a steady stream of virus laden emails from udw.ac.za (a university in South Africa). I have repeatedly contacted them as well as their up stream provider (saix.com). All SAIX does is send a nastygram to UDW. All UDW does is experiment in topological auto-proctology. Were SAIX to say "Alright - we've had five complaints this past week. You obviously are not doing anything to solve the problem, so until you do, we are blocking port 25 outbound from you" then UDW would be HIGHLY motivated to correct the problem.
But right now, most ISPs have the attitude of Mind Over Matter - "We don't mind, so it don't matter. Over and out." As such, the problem persists and grows. ISPs mail servers handle a steadily increasing stream of viruses and spam, for which they complain bitterly about having to buy new equipment (while raising their fees), but they don't actually try to SOLVE the problem.
If ISPs were to say, "The line must be drawn here. Here, and no further." - if they were to start blocking viruses and spam, disconnecting users that spread them, and requiring their downstream to do the same, then the expected value of the number of hosts any one host can infect would drop to a tiny fraction of 1, and the reaction would damp out. Viruses would not longer spread like wildfire, the news would no longer report upon them, and the virus writers would no longer get egobo from writing them.
However, as long as ISPs continue to do their best Sgt. Schultz of Stalag 13 ("I SEE NOTHING! NOTHING!") impersonation, as long as ISPs say "It's not our fault - we are not to blame, why should we do anything about it!" then the problem will only grow.
(/me sits back and waits for the inevitable flames from ISPs wishing to do exactly that...)
www.eFax.com are spammers
1. Write devastating super-virus
2. Release it
3. Destroy unsuspecting internet
4. ???
5. Profit!
ObSlashdotJoke aside, I always wondered where step 4 came in. Clearly, from the number of viruses doing the rounds now, bragging rights alone is enough of a draw for many; equally clearly, from the vast weight of bugs in viruses, it primarly draws teenage l33t hax0rs with more testosterone than talent.
All the devestation of every trojan and virus in history has been without a clear step 4. The addition of a step 4 worries me a lot, and as has been said before even non-Windows people like me can't feel smug and safe forever.
You win again, gravity!
Calling people like this "hackers" is like calling punks who spray paint graffiti on railroad cars "painters" and "artists".
--
"Open source is good." - Steve Jobs
"Open source is evil." - Microsoft
In one of the first of these that I saw back in May, the spammer apparently hadn't yet learned the art of using the Bcc: header, and all the addresses it was being sent to were clearly harvested from one newsgroup that I regularly read (and post in). That's how I knew it was spammed, and not just an "address book dipper" virus. And for some time, people have been spamming binaries pictures newsgroups with .exe attachments.
I'm glad to do my part in creating a diverse computing environment by running OS X instead of the leading virus-ridden OS. Is there any truth to the rumor that Microsoft is going to rename Outlook Express as ActiveVirus[tm]? :-)
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
Now, if they're using hacked computers, they're on the wrong side of the law. Period. We're not talking civil damages any longer. The discussion point is how long they'll be in "Federal pound-me-in-the-ass Prison".
This is the dumbest idea from a spammers viewpoint I've ever read. However, I'm not under the impression many of these guys are intelligent. The only reason they've been able to defeat filters and other mechanisms is either stupid admins or half-hearted implementations.
I personally hope they do it! I'd love to see a few spend some time in our lovely Federal Corrections Facilities.
Computer Science is Applied Philosophy
I run honeypots and work in security and I can tell you firsthand that this is definitely an accurate conclusion to draw. People exploit Windows boxes all the time and the only things I ever see them do with them are opening up spam relays or hooking it up as a bot to a warez IRC channel. There's absolutely no skill involved, it's just script kiddies with automated tools taking advantage of lazy Windozers who forget to set SQL passwords or ever patch their system with the latest updates. It's pathetic, and it really makes me think that spam can never be stopped no matter how much legislation gets passed.