Security researchers have traced spam-sending botnet clients back to networks run by the US military.

Support Intelligence, the firm whose research on honeynets revealed that the networks of at least 28 Fortune 1000 companies contained malware-infected spam-spewing PCs, has found evidence of bots running behind military networks.

Rick Wesson, chief exec of Support Intelligence, said the firm's honeynet system has received Viagra spam from an IP address owned by the Randolph Airforce base. Support Intelligence has also observed bots - running IP addresses owned by the Directorate of Information Management - trying to connect to botnet command and control servers, evidence that PCs run by the directorate have become spam proxies under the control of hackers.

Most security experts associate malware-infected PCs that form the zombie components of botnet networks with careless consumers. The work of Support Intelligence suggests that large IT firms, including HP and Oracle, as well as the US military, are also partly responsible for the deluge of stock offer scams, penis pill offers, and other assorted tat that deluges surfers' inboxes every day.

The misuse of US military networks by spammers and other pond life is infrequently reported, but goes back some years. In August 2004, we reported how blog comment spams promoting illegal porn sites were sent through compromised machines associated with unclassified US military networks. Spam advertising "incest, rape and animal sex" pornography was posted on a web log which was set up to discuss the ID Cards Bill via an open proxy at the gateway of an unclassified military network. ®

Related stories

• Zombies flood broadband networks (18 September 2007)
• Malware miscreants target parked domains (14 August 2007)
• VXers publish blog poisoning tool (30 July 2007)
• Trojan creates bogus webmail accounts to punt drugs (6 July 2007)
• Storm Trojan feeds on Independence Day (4 July 2007)
• FBI logs its millionth zombie address (13 June 2007)
• Cloudmark takes anti-spam to the edge (1 June 2007)
• Eighties throwback worm spreads via memory sticks (8 May 2007)
• DDoS attacks fall as crackers turn to spam (2 May 2007)
• Electrode hats to exploit soldiers' subconscious powers (2 May 2007)
• VXers push small coc Trojan on unwilling world (2 May 2007)
• MPs criticise combat ID systems (1 May 2007)
• Hackers debut spam and virus sandwich (26 April 2007)
• Lawyer says accused 'sharers' should resist legal claims (25 April 2007)
• Exclusive So who sent you that spam? HP or Oracle? (28 March 2007)
• China displaces Britain as botnet epicentre (19 March 2007)
• Imperfect Storm aids spammers (19 February 2007)
• Dutch botnet herder fined €75K for sending 9bn spams (2 February 2007)
• Botnet 'pandemic' threatens to strangle the net (26 January 2007)
• US tops spam relaying and malware leagues of shame (22 January 2007)
• Meet the world's most prolific spammers (14 November 2006)
• Porno blog spam turns nasty (4 August 2004)