- 4chan hell raisers finding fame brings heat?
- The 10 dumbest mistakes network managers make
- NetApp quits bidding war in face of EMC opposition
- CompuServe closes after 30 years
- Google to launch open-source Chrome OS this year
It appears that PDF spam has had its 15 minutes of fame.
Having reached its peak volume on Aug. 7 at nearly 30 % of all spam messages sent, PDF spam today is hardly registering on e-mail security vendors’ spamometers.
The unwanted e-mails with PDF files attached – usually pushing the recipient to purchase a penny stock that the spammer then dumps once the trading price goes up – comprise less than 1% of spam today, according to security vendor Sophos.
PDF spam began hitting high volume levels in early summer, the highest of which occurred on Aug. 7 when a pump-and-dump stock scam exploded across the Internet, touting a company called Prime Time Group. The attached PDF looked like a financial newsletter advising the purchase of the stock. That spam blast, which some security vendors said at the time was the largest in spam history, lasted for the better part of the week.
There could be a number of reasons why PDF spam has all but disappeared, says Ron O’Brien, Sophos senior security analyst. Since the actual message is attached to, not embedded in, the e-mail, recipients may find it too time consuming or cumbersome to open, he says.
“A malicious embedded link, on the other hand, is quick and easy to access and would probably have a higher likelihood of luring people to open” it, he says.
In addition, e-mail users are starting the heed the warnings of security experts and IT managers that dictate attachments from unknown senders should not be opened.
“The most likely reason for the drop-off [in the volume of PDF spam] is that the campaigns were largely unsuccessful -- persons who received the e-mail containing the PDF did not open the attachment,” O’Brien says. “Not a surprise, given that most attachments from unknown sources are not opened anymore.”
These reasons would explain why a few good, old-fashioned spam messages appeared in some in-boxes over the last few days, simply stating the recipient should purchase a cheap stock before it gets snapped up. No attachments, not even a link to a Web site, just some persuasive text.
While spammers may be looking for new ways to get their message across, Sophos’ O’Brien warns that e-mail users should beware of a false sense of security.
“Although PDF spam is showing a decrease currently, there’s no reason to believe that it will not strike again,” he says.
Comments (2)
Comment spam in an articleBy Anonymous on August 30, 2007, 1:51 pmComment spam in an article about PDF spam. How ironic.
Reply | Read entire comment
RE: PDF spam levels plummetBy Bob Coe on August 30, 2007, 10:23 amI use Spambayes, one of the best spam filters currently available, and it wasn't fooled at all by the PDF spam. I few weeks ago I got thousands of PDF spam messages...
Reply | Read entire comment
View all comments