The Register® — Biting the hand that feeds IT

Feeds

Spam regains pre-McColo reach

Junk mail strikes back

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

If you've noticed a spike in the amount of spam you're receiving, you're not alone. According to an analysis by Google, the volume of junk mail has returned to levels not seen since November, when host provider McColo was disconnected.

By the second half of March, spam volumes returned to pre-McColo takedown levels, according to the analysis, which was based on the inboxes Google manages for more than 50,000 businesses and 15 million business users. What's more, the growth rate during the first quarter of this year, at 1.2 percent per day, was the highest it's been since early 2008.

"It's difficult to ascertain exactly how spammers have rebuilt in the wake of McColo, but data suggests they're adopting new strategies to avoid a McColo-type takedown from occurring again," Amanda Kleha, a member of Google's security and archiving team, writes here. "Specifically, the recent upward trajectory of spam could indicate that spammers are building botnets that are more robust but send less volume – or at least that they haven't enabled their botnets to run at full capacity because they're wary of exposing a new ISP as a target."

Spam levels plummeted following the mid-November takedown of McColo, which hosted the master control channels for some of the world's biggest and most notorious spam gangs. McColo's ouster came after its upstream providers pulled the plug on their customer following complaints it was a conduit for junk email, phishing, and other types of online crime. Almost overnight, spam volumes dropped by 40 percent or more, by some estimates.

Since then, spam levels have slowly crept upward. In January, web-filtering firm MessageLabs reported that spam volumes were about 80 percent of pre-McColo takedown levels.

Additionally, over the past month Google employees have observed a rise in the amount of spam with malware attached. They've also seen new scams that target recipients by their geographic location. ®

Agentless Backup is Not a Myth

Latest Comments

1.2% per day?

"the growth rate during the first quarter of this year, at 1.2 percent per day, was the highest it's been since early 2008."

Where does that figure come from? A rate of 1.2% per day for a quarter (90 days) would mean an increase of (... and carry the seven...) 192% on the period.

Elsewhere in the article, the figure is "80% of pre-McColo takedown levels" in late January (admittedly from a different company) and back to pre-McColo takedown levels today. That's an increase of only 25% on the period.

Maybe spammers take a break over Christmas, so that the 1.2% per day average since the start of the year is hugely front-loaded in January, and consists of the spammers recovering from festive hangovers more than from the loss of McColo.

0
0

Its not just with the email

I noticed a corresponding fall then rise with Usenet spam. In January and February the newsgroups were obviously much cleaner, especially with regard to a handful of the most prolific porn spammers.

0
0

Yeah, spam is definitely up

Grrr. Checking the logs, my domain that's over 12 years old got 12 952 spams yesterday and 35 real ones, the one that's 9 years old got 4 965 spams and 16 real ones. If it wasn't for tight filtering, those domains would be useless to me today for mail. Across all my domains it's a staggering 98,02 % spam.

Email's dead.

0
0

More from The Register

 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
 breaking news
Yahoo! joins! rivals! in! PRISM! data! request! admission!
Keep calm and carry on using American tech firms, folks
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving