[ISN] Spam Levels Creep Back Up 2 Weeks After McColo Shutdown

From: InfoSec News <alerts_at_private>
Date: Wed, 26 Nov 2008 04:16:26 -0600 (CST)

By Brian Prince

Spam levels appear to be rising again after a steep decline.

According to researchers at MessageLabs, now part of Symantec, spam 
volumes have doubled since last week. Spam levels dropped off 
dramatically with the shutdown of Web hosting company McColo on Nov. 11. 
Though the firm briefly gained new life the weekend of Nov. 15, it was 
quickly shut down again, and spam at first remained at relatively low 

McColo played host to a number of major botnets, including Rustock and 
Asprox. According to Matt Sergeant, senior anti-spam technologist at 
MessageLabs, the lag between the initial decline and the subsequent rise 
was due to the time it took for the botnet owners to find a new ISP and 
bandwidth provider.

"The Asprox and Rustock botnets are back with a vengeance after having 
found new command and control," Sergeant said in an e-mail. "Cutwail 
never went away and it seems its owners have used the opportunity to 
increase output. Mega-D is also on the rise again," he said. "Srizbi, 
having once been responsible for 50 percent of all spam, is now 
completely defunct. Without this botnet, spam levels won't return to 
what they had been."


Help InfoSecNews.org with a donation!
Received on Wed Nov 26 2008 - 02:16:26 PST

This archive was generated by hypermail 2.2.0 : Wed Nov 26 2008 - 02:23:54 PST