Slashdot Mirror


Spamming Becoming Financially Infeasible

itwbennett writes "Making money in spam isn't as easy as it used to be. 'It's not something financially feasible for anyone to even consider,' said Robert Soloway, who in his heyday made $20,000/day as a spammer. 'Spam — the Internet's original sin — dropped for the first time ever at the end of 2010,' writes IDG News Service's Robert McMillan. 'In September, Cisco System's IronPort group was tracking 300 billion spam messages per day. By April, the volume had shrunk to 34 billion per day, a remarkable decline.' Soloway says spam filters have become too good."

25 of 212 comments (clear)

  1. I don’t buy it by Anrego · · Score: 5, Insightful

    It may have hit a slump, but it’ll be back.

    People en-masse haven’t gotten any smarter. There are still enough people who will fall for scams and do business with the kind of people who advertise via spam. Some good tech is currently making an effective barrier between the idiots and the spammers, but the idiots are still there, so the profitability is still there. Give the bad guys a little time. They’ll come up with new ways of getting around our current filters.

    Of course the other theory is that spam has become “less interesting” in light of other new and exciting ways of screwing with people. Once those dry up though, I think the guys with the suits will fall back on classic reliable spam to make their money.

    1. Re:I don’t buy it by poetmatt · · Score: 3, Insightful

      it's humorous, but it's just a market change.

      social engineering, and pfishing are probably a whole lot more "financially feasible", much more results for less effort.

      I mean would profits from info gleaned via a SQL injection be really considered a "hack" these days if it was a script kiddie?

    2. Re:I don’t buy it by XiaoMing · · Score: 2

      The people using the internet might be just as dumb, but who said the majority of the spam is getting through to these people anymore?

      You have to keep in mind that the bright people who've made most of today's everyday technology possible (to those who don't appreciate this point, maybe teach yourself general relativity prior the next time you poke your TomTom) are also writing spam filters on the server side too nowadays (with great financial incentive for the providers via reduced overhead), not just the client side.

      I remember in this asshole's "heyday" when I had to manually block send-from addresses in hotmail, and now only the most grammatically well-crafted emails get through, and are still reported fishy.

    3. Re:I don’t buy it by rtfa-troll · · Score: 3, Insightful

      My theory is that the idiots are using Facebook, and to some extent other social/instant media so that's where the spam is moving. (not saying that all Facebook users are idiots, in fact some of my more friendly than not acquaintances are Facebook users, just saying that most idiots are Facebook users).

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
    4. Re:I don’t buy it by yarnosh · · Score: 2

      I think you have it backwards. Other avenues of attack will come back now that spam is no longer viable. As far as knowing how to get past filters, the thing is that not all filters are the same. Maybe your company's filter had a hole, but not everyone uses the same techniques. Also, good filters look at more than content. Greylisting, for example, cuts out 80% of spam simply because successful spamming depends on incredibly high volumes and performing the retries required by greylisting is just not feasible. Hell, if you simply block unauthenticated SMTP access to all broadband IPs, you can cut out the majority of SPAM. Bulk of spam depends on botnets. You just can't push the necessary amount of spam through legit channels on a consistent basis. If you abuse someone else's system, they will shut you out. And by the time you build up your own resources to delivery that kind of volume, you'll be blacklisted.

    5. Re:I don’t buy it by Ephemeriis · · Score: 3, Insightful

      People en-masse haven’t gotten any smarter.

      People haven't gotten any smarter, but technology has.

      Outlook has junk mail filtering built-in. Gmail has spam filtering built-in. Pretty much every mail server out there has some kind of spam filtering available. Pretty much every endpoint protection package has a spam filter. There are tons of different filtering systems available for purchase.

      Relatively little spam actually makes it through to the user's inbox anymore. So there's less for the stupid/gullible folks to click on.

      Give the bad guys a little time. They’ll come up with new ways of getting around our current filters.

      Well, of course they will... But the good guys are going to keep developing new filters, too.

      Of course the other theory is that spam has become “less interesting” in light of other new and exciting ways of screwing with people. Once those dry up though, I think the guys with the suits will fall back on classic reliable spam to make their money.

      Spammers go wherever the market is. Right now the market is on the social networks. More people are communicating more often on things like Facebook than through simple SMTP. So there's less profit to be had in spamming SMTP servers.

      Sure, if SMTP suddenly becomes crazy-popular again you'll see the spammers head back in that direction... But all our existing filters will still be there to curtail that crap.

      the profitability is still there.

      I don't know about that...

      Sure, it's probably pretty cheap to send out a few thousand emails... But how many of those actually make it in front of somebody's eyes? And how many of those actually get read? And how many of those are actually clicked-on?

      The real money these days is in malware. Dropping bots on computers and grabbing their credentials for various websites... Or sending out some kind of fake antivirus scanner that scares people into paying $50 to clean up the fake infection... Or using those bots to hack some big, important website...

      I really don't know that there's all that much profit to be made in sending out spam these days.

      --
      "Work is the curse of the drinking classes." -Oscar Wilde
    6. Re:I don’t buy it by RsG · · Score: 2

      Except it isn't zero. Time is money. If a spammer spends time setting up an email scam, and makes a pittance out of it, then it isn't worth it for them.

      Of course, not all spammers are created equal. Some will get more out of an hour of work than others. But most spammers aren't very good at what they do; if they had the skills to make it they'd be doing something less degrading. It may well be the unskilled ones have a choice between sending out spam emails or working in a sweatshop, and spam is the lesser evil for them.

      But make it so that they have to spend hours learning their way around filters just to make a buck, and they'll up and quit. Why expend so much effort to earn so little?

      --
      Erotic is when you use a feather. Exotic is when you use the whole chicken.
    7. Re:I don’t buy it by pixelpusher220 · · Score: 2

      Actual spammers never make any significant money, just like gold diggers in the gold rush never made money.

      The money is in selling the shovels - or in this case, the tools, email lists, etc. by which the suckers attempt to 'hit it big'.

      --
      People in cars cause accidents....accidents in cars cause people :-D
    8. Re:I don’t buy it by Attila+Dimedici · · Score: 2

      You are aware that Herman Cain is black, aren't you? It is hard to argue that someone who supports Herman Caine for President is a racist because they oppose Obama. Which is what the poster I replied to seemed to claiming, unless you are contending that blacks are not in the same category as "brownskinned people."
      On the other hand, it is easy to argue that a person that supports the party of segregation, Jim Crow laws and the KKK is a racist.

      --
      The truth is that all men having power ought to be mistrusted. James Madison
  2. This has been the strategy for a while by hedwards · · Score: 5, Interesting

    People have been working on increasing the cost and decreasing the reward from spamming for some time now. From discouraging people from buying from spam messages to grey listing, to shutting down botnets, all of that has been largely for the purposes of making it less attractive to spam.

    I'm just a bit surprised that it's starting to have an effect, it's hard to compete with basically free server capacity and bandwidth.

  3. Of course its financially feasible. by Kenja · · Score: 2

    Not everyone needs $20,000 a day. Average income in China for example is only a couple thousand dollars US. Costs are lower over sea and profits can be lower while still maintaining financial feasibility.

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    1. Re:Of course its financially feasible. by M.+Baranczak · · Score: 2

      Not if the profits are negative. The thing is, spammers are already operating on a really thin profit margin; so even a small rise in the cost of spamming could have a devastating effect.

  4. Easier Ways by Kamiza+Ikioi · · Score: 5, Insightful

    It's not that they've gone legit. It's that there are easier ways to scam people out of their money for higher profit returns, such as spear-phishing.

    --
    I8-D
  5. SPAM filters too good? by ShavedOrangutan · · Score: 2, Informative

    Yeah. Half my email ends up in a SPAM bucket. Thanks, you bastard. If I want someone to actually receive a message I have to send it through Facebook or SMS.

    --
    Godaddy is a scam and a ripoff.
  6. On paper it might be down... by toonces33 · · Score: 2

    but in my accounts it still comes in as a flood. Some of it is clearly malware coming in - others are questionable scans plus the usual Nigerian nonsense.

  7. Depends on your definition by wcrowe · · Score: 3, Informative

    It depends on your definition of "spam". By my definition, I get more spam than ever. The difference is that much of it is from legit companies who comply with the CAN-SPAM law. I can opt out, but I'm getting about 100 or more of them a day, and I can't spend all day opting out of every single one of them. It may be legal, but it's still spam, as far as I'm concerned.

    --
    Proverbs 21:19
  8. Re:Good news, but... by glwtta · · Score: 2
    --
    sic transit gloria mundi
  9. Re:Paid Work? by djdanlib · · Score: 2

    The term "spam" as used to represent junk e-mail wasn't originally an acronym. They took the term 'spam' from the classic Monty Python sketch about spam, because it represented something unwanted. "I don't like spam!"

    Believe me, advertising people will jump on any chance they see to sell some more ads, and there's a sucker born every minute who will pay for those ads to be distributed.

  10. Big corps have stopped tolerating spam by Medievalist · · Score: 3, Interesting

    Aren't most of the spam kings either dead, retired, or in jail at this point? I hear it's lonely in Boca Raton these days.

    And wasn't there a wave of murders in the former Soviet Union when Microsoft and Time-Warner/AOL decided they were no longer going to ignore spammers? Bunch of free-lance software developers with connections to organized crime found dead, as I recall; the rumor was that the spam kings were eliminating people who knew too much.

    Well, regardless of the truth or falsehood of any of these tales and rumors, if corporate pressure has made spamming unprofitable, I'm certainly not complaining. It's about time the f***ing invisible hand did something besides j***ng off US Congressmen.

  11. This is terrible news! by itchythebear · · Score: 2

    If this keeps up this could be the end of western society as we know it. I really hope the powers that be can come up with a reasonable bailout strategy for the spammers. They are to big to allow to fail.

    --
    If what I just said sounded like a troll, it was probably just a failed attempt at humor.
  12. Re:Good news, but... by plover · · Score: 2, Interesting

    I've heard that 'spam' subsidizes the entire USPS. Without the revenue generated by 3rd class bulk rate, first class postage would probably be about $2 USD per letter (allegedly.) Thus spam keeps your letter carriers coming around every day, except Sundays.

    Of course, that was several years ago. I've also heard that email has decimated the first class postage business, so the proportional subsidy is now probably much higher than that.

    --
    John
  13. Re:Damn!! Spam = ~4yrs in the Federal Pen? by Issarlk · · Score: 2

    Oh the irony. The spammer must regret having sent all those "penis enlargement" ads when landing in prison.

  14. Re:People with unreliable ISP-provided email by gnarfel · · Score: 2

    GMail? SMTP Relay services? It's nearly impossible to actually run your own mail server now-a-days anyways, unless you want to jump through all the hoops required (DNS records, etc). I personally had a need for it not too long ago, I had a connection that was intermittent at best but we needed local e-mail as well. We simply set up our own server on the LAN and paid for an amazon ec2 instance that simply forwarded all incoming and outgoing mail for us.

    --
    Local music(to upstate NY). http://gnarfel.com/ radio.
  15. Re:People with unreliable ISP-provided email by rot26 · · Score: 2

    At least you can make some attempt to redeem yourself with spamhaus. Cisco's shitty IronPort lists me as having a "poor" reputation because 6 or 8 sites in my A block have a "poor" (and totally unexplained) reputation. Me? Perfect. Not blacklisted on any of the 130 or so lists. But I can't send email to godaddy because they use the ironport abomination. (Godaddy, yeah I know, right? It's the principal of the thing.)

    Cisco is Cisco. "Don't blame us, we didn't block anything, we just told THEM not to trust you, go figure."

    Godaddy is godaddy. "If you think this block is in error, go fuck yourself".

    Anybody else run into this? I didn't think I could hate Cisco any more than I already did but I was wrong.

    --



    To ensure perfect aim, shoot first and call whatever you hit the target
  16. Re:People with unreliable ISP-provided email by Vrtigo1 · · Score: 2

    Maybe I've just been lucky, but it is quite easy to run your own SMTP server here in Florida on Road Runner. They don't restrict in/outbound SMTP, so you can pretty do much whatever you want. Even if they did block outbound SMTP (which I think is a halfway decent idea), there are plenty of services out there that will provide SMTP relay service for you, either on nonstandard ports so you can get by firewall rules, or via VPN, so the firewall can't even see the traffic. Last I checked, these services were a few bucks a month or something like $100/year. If you need to run your own mail server for business purposes, this shouldn't be too burdensome, plus you get the benefit of redundant smart hosts, so you don't have to worry about your ISP's mail server going offline.