Feeds

Credit processors targeted in fight against spam

Follow the money

SANS - Survey on application security programs

Computer scientists are advocating the targeting of card-processing middlemen as a way of clamping down on spam.

Improving spam filters and takedown efforts against botnets, the main source of the vast majority of junk mail, have been among the main focus of spam fighters of late. Computer researchers at the University of California, San Diego and University of California, Berkeley are taking a slightly different tack in the fight against junk mail, targeting the small number of firms prepared to handle credit card transactions for spamvertised websites.

The researchers have discovered that the vast majority (95 per cent) of the credit card payments to unlicensed pharmaceutical sites are handled by just three payment processing firms – based in Azerbaijan, Denmark and Nevis, in the West Indies, respectively.

By putting the squeeze on these firms it might be possible to choke the flow of money to spammers, making spam less profitable and, hopefully, less prevalent. Pharmacy spam levels fluctuate but the class of junk mail has long been the biggest single category of spam.

The findings came after three months of analysing spam data, broad crawling of naming and hosting infrastructures, and over 100 purchases from spam-advertised sites. The study discovered that payment-processing for replica and software products advertised through spam was also monetised using merchant services from just a handful of banks.

Spam makes up 74.8 per cent of all email messages, compared to 90 per cent last year, according to the latest statistics from Symantec, published last week. The net security efforts credits botnet takedown efforts, most notably against the infamous Rustock botnet, for the decrease.

A paper on the California University research, entitled Click Trajectories: End-to-End Analysis of the Spam Value Chain, which presents an interesting overview of the business models behind the junk mail that curses all our inboxes, can be found here (16-page pdf/2.3MB).

Over the years, a highly sophisticated business network has evolved around the delivery of junk mail messages. Components of the spam ecosystem include "bulletproof hosting", order fulfilment and payment processing, among many others, as explained in much greater depth in the paper. ®

Combat fraud and increase customer satisfaction

More from The Register

next story
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Natter-board tells middle-class Britain to purée its passwords
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
NSA denies it knew about and USED Heartbleed encryption flaw for TWO YEARS
Agency forgets it exists to protect communications, not just spy on them
prev story

Whitepapers

Designing a defence for mobile apps
In this whitepaper learn the various considerations for defending mobile applications; from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.