Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Spammers' new MP3 trick may be short-lived

Spam messages containing MP3s are starting to show up, but thanks to their size and file type, they'll likely be caught by filters


A variation of spam is sliding past spam filters into inboxes, but it's not likely the new trick will be successful much longer, a security expert said Thursday.

The spam messages, urging recipients to buy a stock, have an MP3 audio attachment but no subject line or text, said John Graham-Cumming, an anti-spam consultant and researcher who is based in France.

"I think this is the first time we've seen this," said Graham-Cumming, who tracks new kinds of spam.

The audio messages, which vary in length, contain a warbled, robotic voice with a British accent encouraging people to invest in Exit Only, a company that owns a Web site, www.Text4Cars.com, which connects vehicle buyers and sells through SMS (Short Message Service). Exit Only says it's not involved in sending the spam.

Graham-Cumming said the spam falls into the category of "pump and dump" fraud. Scammers invest in a company with a low-priced stock and send out a round of spam, causing gullible investors to buy it and increase the stock's price.

As the stock price peaks, fraudsters cash out, which causes the stock to precipitously fall, burning other investors. The practice is illegal.

Exit Only was trading around $0.41 on Thursday. Not much detail is available on the company, but it issued a news release on Tuesday heralding the launch of its Text4Cars service in the Los Angeles area. The news release said the company hoped to be fully launched in the United States in early 2008.

Exit Only's CEO, David Dion, said he learned of the spam around Wednesday morning. He has since notified the U.S. Securities and Exchange Commission and said his company has nothing to do with the spam run.

"I am very distraught by this," Dion said.

Dion said only about 100 shares have been traded so far, so the scam hasn't been successful.

The messages are more annoying than harmful. But there are a variety of defenses e-mail administrators and security companies can employ to stop it, Graham-Cumming said.

Spam filters can be configured to cull messages with MP3s, since most companies don't have a business use for the file type, Graham-Cumming said. Administrators can also change their e-mail server settings to slow down the speed at which they receive messages with MP3 attachments, he said.

That method has been proven to frustrate spammers, who typically shut down the connection if the spam isn't going through quickly enough since the delay consumes valuable bandwidth, Graham-Cumming said.

These spam messages are also relatively large -- around 100KB -- compared to other spam, which may be another reason this kind of spam may not be around for long. Spam messages with larger file sizes require more bandwidth to send, meaning spammers can't send out high volumes of messages, Graham-Cumming said.

"Honestly, my prediction is this is going to be around for a while and disappear," he said.

E-mail security company MessageLabs said it was catching about 10,000 spam messages with MP3s per hour since late Wednesday night.


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Take control of your content- leverage Microsoft SharePoint
Microsoft Office SharePoint Server (MOSS) offers core content management designed for a broad user population. Attend this webcast to learn how to implement a strategy that allows for the coexistence of both MOSS and advanced ECM solution within the same IT environment. Sponsor: IBM

»  Click here to view this Webcast
  The Path to Enterprise Security
This is your comprehensive guide to Enterprise Security. In it you'll find solutions to the most pressing security threats facing you and your company. Learn the latest on insider threats and how to effectively minimize risk within your organization. Sponsored by Nokia

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
IFW Daily 08/29/2008

Microsoft will focus on performance issues in Windows 7 and IE8, Qualcomm...

 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist