Spambots edge back online post-McColo

By Angela Gunn | Published November 26, 2008, 9:19 PM

It was just too good to last: Researchers report that spam levels that dropped in the wake of a high-profile takedown are edging back up -- and that a particularly pernicious botnet made it back online Wednesday night.

When two upstream providers chose to pull the plug on McColo earlier this month, the net at large enjoyed an unusual and slightly eerie quiet, as spam levels dropped by as much as 65%. At the time, anti-malware researchers suggested that we enjoy the peace while it lasted...

...because these guys keep coming back, like a cold sore or a creepy uncle at holiday dinners. Since the takedown, spam has been slowly seeping back into the ecosystem, but on Monday, the rates jolted sharply upward.

Matt Sergeant, senior anti-spam technologist at MessageLabs, has the unenviable job of watching the waters rise. He suggests that the botnet owners have, two weeks later, hooked up with new service providers.

"The Asprox and Rustock botnets are back with a vengeance after having found new command and control," Sergeant noted on Tuesday, saying that Mega-D and Warezov were clearly in action as well. "Cutwail never went away, and it seems its owners have used the opportunity to increase output."

But the megillah, the godzilla, the inbox-killer had yet to re-emerge -- Srizbi, the botnet Sergeant characterizes as responsible for a full 50% of all spam. Alas, Tuesday night saw its return, Sergeant reports.

"In the last 24 hours Srizbi has managed to regain control of some of the botnet PCs which were inactive after the McColo shutdown," he told BetaNews on Wednesday afternoon. "This has yet to result in a significant increase in spam volumes, however given this progression we expect to see spam volumes back to 'normal' levels in around a week's time."

While we were relaxing, he says, it's likely that the botnet owners were scrambling to retain new providers, while the shady firms that rent such things were forced to languish and contemplate lost profits.

Comments

View comments by with a score of at least

i like it ~wow gold yes i miss you cheap wow gold hello~, i want to make friend with you buy wow gold

Score: 0

|

I believe that the one thing all OS's of choice have is that we're all forced to eat SPAM at some point in time. Spam blockers aren't infallable & let some get through, or just as bad in some cases, they block some legit mail.

If there is any one thing that we can all agree upon it is this....WE ALL HATE SPAM!

Cue the SPAM song please!
SPAM! SPAM! SPAM! SPAM!
(sorry, couldn't resist)

Score: 0

|

CHEAP WHOLESALE:
Nike Jordan\Air Jordan shoes, Air force ones sneakers, Nike SB,Nike dunk shoes
We are very professional supplier of Adidas shoes Wholesale,Cheap Gucci shoes,Prada shoes For sale,Wholesale Nike shoesTimberland shoes,and many other Nike Shoes,JordanS shoes are reviewed, listed, and talked about here.
Air Jordans,Nike Jordans Wholesale Nike, wholesale nike shoes,Jordan Shoes,wholesale t-s***,wholesale Jordans,brand t-s***,jeans,Wholesale handbags,Wallet, Jacket, Hoodies.

BrandDaze.com:Wholesale Air Force Ones,Wholesale jordan sneakers,nike sneakers,cheap Jordan,Jordan shoes,Cheap Jordan Shoes,Nike Air Jordan Shoes.
Nike Shoes,Air Jordan And Nike Jordan Shoes Are So cheap to Buy!

Cheap Wholesale Shoes International Trade Co.,Ltd Form China!

Score: -1

|

How appropriate! ;-)))))

Score: 0

|

The sad truth is that I am not buried in anonymous spam.

Rather I am buried in spam from sites associated with various publications, groups, and organizations providing so many IT related 'services'(yeah, right) claiming to add value to my day that I have had some correspondence with in the past - and where even selecting to opt out of correspondance has failed to abate.

Score: 0

|

Oh yes, the majority of "spam" is from websites that are simply promoting themselves. Although I do get the occasional "Nobody wants poor Britney so she had to resort to masturbating. Angelina and Brad are caught on camera having oral sex." (The actual subject line of an email in my spam folder).

Score: 0

|

@foxfyre 3rd world countries would likely face embargoes from the rest of the world which would make their situations worse. The kickback from spammers likely would be less than the damage done at large to the economy and standing in the world.

Score: 0

|

Spam is not a determing factor in international relations! If so, we would have severed ties with Russia, the Ukraine, China and half the other countries actively pirating and generating malware LONG AGO; not to mention ACTIVELY attempting to penetrate secure government and defense related sites!

Score: 0

|

Gee. Now I am really confused.

I thought they rid the world of all of the evil doings?

I know! They need to pass a(nother) law and show them we are really serious!

My only question is why in hell are these folks locating server farms and/or using services located in countries that will shut them down? Why not just go to a smaller 3rd world country who would welcome a small 'donation' (eg kickback) to operate to their heart's content. But then, I suspect that is their next move.

Score: 0

|

Responses were deleted by BetaNews for offensive content. Some non-offensive replies to those responses may also have been removed.

Score: 0

|

LOL. I'm sorry and why do I use a Mac again? ^_^

Score: 0

|

because you're insecure and need to feel superior?

Score: -1

|

LOL. Pretty bold statement saying Macs are immune to spam. Insecure, arrogant AND clueless.

Score: 0

|

^ this.

Score: 0

|

LOL...I have a Mac too, but I get just as much spam on OS X as Windows...so I'm trying to see your point. ^~^

Score: 0

|

Keir is 'teh winnah' with that response to a typical clueless fanboi

Score: 0

|

...and ironically, his insecurity results in him ultimately being more secure in reality.

...maybe others could learn something from that...but as reality closes in and we remember where we are, I doubt it...

Score: 0

|

Spam is Spam... If someone thinks that owning a MAC makes them an exception, has to be smoking something or was dropped as a baby..

Score: 0

|

Not entirely true...

While using a Mac has NOmpact upon the spam one might receive, but akes a BIG difference in the potential malware exposure that is so commonly a variant in spam!

The Mac's sandboxing capabilities makes exposure as simple as 'delete'. But so many of the clueless here who simply think the Macs malware resistance is simply a matter of fewer users simply confirm the fact that they are clueless.

Score: 0

|

Microsoft launches Office 2010 technical beta a few days early

A big week for Microsoft starts off with an out-of-sync surprise: the early release of the Office Technical Beta ahead of the launch keynote.

PDC 2009 Day 0: Vista is through

If there was any doubt in your mind that Microsoft is putting Vista behind it, the first session at PDC would eliminate it for good.

Windows Marketplace for Mobile launches on WinMo 6.0 and 6.1

No longer isolated to Windows Mobile 6.5, the Windows Phone app store has opened up to older versions of Windows Mobile.

Samsung releases another Android: where will it fit in with Bada approaching?

Samsung today announced the Galaxy Spica, sequel to its first Android handset destined for Europe and Asia.

Twitter to abandon 'politically biased' suggested user list

Twitter's suggested list of users to follow will be going away, says co-founder Biz Stone.

The Internet can still be a positive force, World Wide Web Foundation says

Sir Tim Berners-Lee's World Wide Web Foundation has launched worldwide operations.

Blockbuster's way down, but poised for a comeback

Though it took a serious beating in 2009, Blockbuster CEO Jim Keyes says the company can turn it around.

iTunes Preview doesn't go far enough to create Web-based option for store

Apple has rolled out iTunes Preview, a Web interface for browsing iTunes.

PDC 2009 Preview: The move to Office 2010 and Visual Studio 2010

The major focus of Microsoft's conference next week will likely be explaining why two pillars of its software sales strategy deserve to remain where they are.

Dell's first smartphone aids the Android onslaught

Longtime PC leader Dell has finally announced its Android-based smarphone.

After the Intel + AMD armistice: Do we really want a level playing field?

Scott Fulton On Point: One by one, the reasons for us to continue suspending the course toward open and fair competition in IT, are dropping like flies.