Slashdot Mirror
Are Spammers Giving Up?
sfjoe writes "Are spammers giving up the game? Google seems to think so. In an article at Wired, Google, '... says that spam attempts, as a percentage of e-mail that's transmitted through its Gmail system, have waned over the last year'. They think their own filters are so good that spammers aren't even trying anymore. 'Other experts disagree with Google, pointing out that overall spam attempts continue to rise. By most estimates, tens of billions of spam messages are sent daily. Yet for most users, the amount of spam arriving in their inboxes has remained relatively flat, thanks to improved filtering.'"
I manage the spam firewall where I work, and I have seen a significant drop this month vs last month. In October we processed 20,000-30,000 emails a day, averaging near 25,000. In the month of November, we have only exceeded 20,000 in a day once, with most days falling short of 15,000. This months average is closer to what it was during the summer, we had seen the increase to around 25,000/day during August/September.
In Gmail, the problem is false positives: when Gmail labels a message as junk, it moves *the whole thread* to the junk folder. So if you have a thread with 20 messages, and the 21st is incorrectly classified as spam, poof, also all the other previous 20, that you had confidently filed away, silently go into the spam folder, where they are silently deleted after 30 days. This is a consequence of how Gmail deals with threads, or "conversations". I reported this bug to the Gmail team long ago, but they haven't fixed it yet as far as I know.
So if you want someone using Gmail to delete an email exchange they had with you, send them an additional message in the same thread offering to sell them Viagra. They will never see the message, but the whole thread will be deleted in one month. Disclaimer: I have not tried this (but I have lost email due to the above problem, and I know I did, as I keep a separate backup of my mail via pop, where the missing messages were still present).
According to the Official Google Blog, there has been little decrease in spam, except for the amount in users' inboxes.
Some spammers will stoop to signing up for shell accounts at ISPs to harvest e-mail addresses. A lot of information can be learned just with that access. Not just compiling the results of ls ~/.. to a host name, but also harvesting cat ~/../*/.forward. The contents of a .forward file can also be disclosed via finger if your host still allows outside access.
It could also be that a relay between your mail server and gmail may be snooping on e-mail packets looking for active addresses @gmail and selling them to spammers.
Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
Lacking mod points today, I can't counteract the -1 Flamebait mod. However, I would like to point out that the parent was intended to be a humourous or satirical parody of a common form of spam. Get a grip folks, or is your member to flaccid to grip at all? Sheesh!
Some mornings it's hardly worth chewing through the restraints to get out of bed.
The way they're making money today with SPAM is through pump-n-dump schemes.
Permit me to break it down for you:
The Phishers will phish usernames and passwords for brokerage accounts, or they will collect the information from personal users by means of a trojan. The criminals log into these accounts and schedule sell orders for whatever stocks they are holding, and schedule buy orders for the penny stock they are going to pump-n-dump. Then they walk away.
They execute the spam, eager traders read the spam, look at the account and see that volume of shares purchased have been bought up in the past n-hours and they jump in. The pumpers have bought their stock before hand and once the volume peaks, they dump. The account holders whose accounts were compromised are left holding the pumped-dumped stock...
The criminals are getting GOOD! They don't need to worry about transferring money out of the compromised brokerage accounts, they are stealing the money and laundering it all in the same step.
And it should be no big surprise that the criminal organizations behind the whole operations is the Russians.
Welcome to professional bank robbery in the 21st century.
Good security is based upon reality and common sense. Common sense is a function of having common knowledge.