The Register® — Biting the hand that feeds IT

Feeds

Pump-and-dump scammers issue German prospectus

PDF ruse attempts to smuggle junk past spam filters

Supercharge your infrastructure

The fraudsters behind pump-and-dump stock spams are trying a new technique in a bid to fool spam filters. Junk mails promoting worthless stocks seen this week are appearing with an attached PDF file.

Typically titled "German Stock Insider", these PDF files purport to offer insider tips and contain more detail than is generally the case in typical pump-and-dump scams, even going to the bother of adding logos and the like for added "authenticity".

They even contain a disclaimer to make them more closely resemble genuine stock prospectus guides. This disclaimer typically reads: "This is not an offer to buy or sell any security. German Stock Insider discloses that they were paid ten thousand Euros for distribution of this report."

Pump-and-dump scams are email campaigns that seek to encourage armchair investors to sink their cash into particular firms' stock.

The goal is to quickly inflate interest in low-value stock with bogus insider info in order to ramp up share prices and sell at a profit before the inevitable crash and burn. Meanwhile, those duped are left holding possibly worthless shares.

Most (but by no means all) of these scams are thought to take place without the knowledge of firms that are the subject of the scams.

According to net security firm Sophos, pump-and-dump stock campaigns account for approximately 25 per cent of all junk mail, up from 0.8 per cent in January 2005.

Content security firm Marshal, however, reckons the tactic is in decline after reaching its high-water mark in February. One in two junk mails scanned by the Australian firm in February involved pump-and-dump scams, a figure that nose-dived to just five per cent in June, according to Marshal's figures.

Earlier this year, the US Securities and Exchange Commission (SEC) suspended trading in 35 firms as a punishment after the companies were frequently referenced in pump-and-dump stock email campaigns. ®

5 ways to prepare your advertising infrastructure for disaster

Whitepapers

5 ways to prepare your advertising infrastructure for disaster
Being prepared allows your brand to greatly improve your advertising infrastructure performance and reliability that, in the end, will boost confidence in your brand.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Email delivery: Hate phishing emails? You'll love DMARC
DMARC has been created as a standard to help properly authenticate your sends and monitor and report phishers that are trying to send from your name..
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Email delivery: 4 steps to get more email to the inbox
This whitepaper lists some steps and information that will give you the best opportunity to achieve an amazing sender reputation.

More from The Register

next story
Chaos Computer Club: iPhone 5S finger-sniffer COMPROMISED
Anyone can touch your phone and make it give up its all
Hundreds of hackers sought for new £500m UK cyber-bomber strike force
Britain must rm -rf its enemies or be rm -rf'ed, declares defence secretary
NSA in new SHOCK 'can see public data' SCANDAL!
What you say on Twitter doesn't stay on Twitter
UK's Get Safe Online? 'No one cares' - run the blockbuster ads instead
Something like Jack Bauer's 24 ... whatever it'll take to teach kids how to bat away hackers
Sweet murmuring Siri opens stalker vulnerability hole in iOS 7
'Siri, hand over my contacts and history now…'
Facebook allows full personal data ransack with Graph Search
Posts, updates, the lot. Our ad sales will boom. Mwu-ha-haaaa ... bitch
London schoolboy cuffed for BIGGEST DDOS ATTACK IN HISTORY
Bet his parents wish he'd been playing computer games
GCHQ's CESG CCP 4 UK GOV IT BFFs? LOL RTFA INFOSEC VIPs ASAP
Yet another security certificate fiddled with by Brit spooks
prev story