Network World
Sunday, July 5, 2009
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Storm worm, other botnets, kept spam levels high in 2007

Spam accounted for an average of 80% of all e-mail traffic in 2007, Commtouch reports

Botnets helped keep spam output at consistently high levels last year, and global spam reached rates as high as 96% of all e-mail traffic during 2007, according to a report from Commtouch.

Other stories on this topic
Obama's Cybersecurity Coordinator Has Broad Agenda 6/29/2009
Network shutdown bill faces changes, aide says 6/26/2009
Security agencies to combat cyber attacks, PM announces 6/26/2009
Powered by Inform

Ensuring you get pizza with sync tools
07/06/09
Here's the answer to missing files compromising your plans for pizza, beer and TV.

The 10 dumbest mistakes network managers make
07/05/09
When you look at the worst corporate security breaches, it's clear that network managers keep making the same mistakes over and over again, and that many of these mistakes are easy to avoid.

Psystar bails on bankruptcy, promises to 'battle Goliath'
07/05/09
The Mac clone maker embroiled in a legal dispute with Apple asked a federal judge last week to dismiss its bankruptcy case, saying that it had been unable to reach a payment agreement with its law firm.

According to data collected by Commtouch, a security firm that specializes in protecting e-mail, the global spam rate averaged around 80% of all e-mail traffic throughout the year (compare antispam products).  

Although the spam rate dipped to as low as 60% in the second quarter of 2007, it spiked back up in the third and fourth quarters, peaking at 96% of all e-mail output early in the fourth quarter. Commtouch says that botnets -- which are networks of infected zombie hosts that are used to carry out distributed denial-of-service attacks and massive spam campaigns -- were the major culprits behind the spam outbreaks.

The most disruptive botnet, says the firm, was the Storm worm botnet, which researchers estimate contains more than 1 million infected machines. In the fourth quarter of 2007, for instance, the Storm botnet launched an MP3 spam campaign that enticed unwitting users into downloading malware by offering them free music through infected sound files. The firm says that this particular attack accounted for 7% to 10% of all global spam traffic at its peak.

In addition to its MP3 attacks, the Storm botnet launched a series of holiday-themed spam attacks that included dancing skeleton graphics for Halloween and Christmas e-mails that enticed users with promises of "sexy girls" who would "give you that special Santa treatment."

Commtouch warns that the Storm botnet has yet to be used to its full potential and that its activity in 2007 "may come to be seen as merely the calm before the Storm compared to what 2008 has yet to bring." Part of the reason that the Storm botnet has been so difficult for security pros to tackle, the firm notes, is that it has an elaborate defense system that aggressively attacks anyone who attempts to reverse engineer it. Additionally, Commtouch says it is virtually impossible to track down Storm's botmaster, because its command and control is executed through a peer-to-peer network.

React: Give us your thoughts on the issues here.
Start a public discussion with other Network World users on this article (scroll up to send this article to a colleague).
Log In | Register for an account (Why you should)

Note: Register to have your user name appear; otherwise your comment will show up as "Anonymous."

*Anonymous comments will only appear once they are approved by the moderator.

Copyright 2008 Network World Inc.