Feeds

Celebrity spam gang whips up a storm

Stealth botnet responsible for huge spam surge

Beginner's guide to SSL certificates

A copycat spam gang has launched an effort to compromise PCs that rivals the botnet created by the infamous Storm Worm Gang.

The botnet established by the Celebrity Spam Gang, so-named for a habit of using celebrity names in malware, is currently responsible for 20 per cent of junk mails in circulation, according to net security firm Marshal.

Marshal reckons the gang has been building up its botnet since August 2006 when it began chucking out messages with infected attachments that commonly promise nude images of celebrities such as Angelina Jolie and Britney Spears. Other tactics include disguising malware-tainted attachments as free games or Windows Security Updates.

All this is fairly standard stuff, yet the gang has enjoyed considerable success.

"It is a concern to us that so many computer users are still being taken in by what we would consider to be an obvious subterfuge as 'check out this nude Britney Spears game'. The Storm Gang has been more inventive with their campaigns and exploited everything from news headlines to greeting cards. There is clearly a need for renewed awareness and education," said Bradley Anstis, VP of products at Marshal.

The Celebrity Spam Gang is following the Storm Gang's template of spamming out malware in order to expand its botnet, in turn building the capacity to generate greater numbers of junk mail messages.

The scale of the gang's activities only became apparent after security researchers at Marshal deliberately infected a machine, turning it into a zombie client of the Celebrity Spam Gang.

"We deliberately infected a test computer with the Celebrity Gang botnet and then closely monitored its behaviour and the make-up of spam it was instructed to send by the spammers," Anstis explained. "We were able to match this spam against 23 per cent of all spam we saw in circulation for the previous month."

Although the Celebrity Spam Gang had been on Marshal's radar for some time, the volume of junk mail it was responsible for came as a surprise to security researchers.

Marshal recommends PC users do not open executable files attached to email messages from addresses they do not recognise or trust and to "refrain from opening any message that purports to feature nude celebrities".

Obvious advice, perhaps, but something a small minority of surfers are ignoring, to the detriment of the internet as a whole. ®

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.