What next, Spam in surround sound?
MessageLabs, the leading provider of messaging and web security services to businesses worldwide, today announced the results of its MessageLabs Intelligence Report for October 2007. The new data reveals that spammers have introduced MP3 music files into the expanding toolbox of stock spam techniques, with 15 million emails shaping the first spam run. Use of MP3 files is the latest tactic designed to sneak messages past spam filters and ultimately control the value of stock for nefarious reasons.
On October 17, MessageLabs intercepted the first copies of an estimated 15 million email spam run which lasted 36 hours and used StormWorm infected computers to disseminate the emails. Purporting to be a legitimate music file, the MP3 file names were all music-related such as beatles.mp3, Britney.mp3 and elvis.mp3, and contained a rusty-sounding, 25-second voice-over touting the latest stock offering from Exit Only Incorporated. The voice was synthesized using a very low compression rate of 16 kHz to keep the overall file size small, at around 50 KB, to avoid detection.
Over recent months, spammers have been toying with different types of file attachments including text, html, image, ZIP, RAR, RTF and PDFs. Analysis of the MP3 spam suggests that this was the work of the cyber criminals responsible for sending out PDF spam in early October, highlighting the frequent interchanging of tools being used.
“The MP3 spam tactic is a natural progression for cyber criminals following runs of image, PDF and Excel junk mail earlier this year,” said Mark Sunner, chief security analyst for MessageLabs. “As users become wary of certain file attachments, scammers will move on to their next tactic, ever hopeful of finding the key which will easily open all inboxes rather than having the door slammed in their face by anti-spam filters. Video spam and PowerPoint are both well anticipated so watch this space for the next format du jour.”
This recent trend proves that spamming techniques are becoming more innovative. As image spam shifts from email attachments to images on free image-hosting sites, MessageLabs experts believe that it is only a matter of time before the spammers apply the same approach to audio spam and upload the message to free multimedia hosting sites such as YouTube, Google Video, MySpace or any number of sites competing in this new media market.
|