Subscribe
  • Home
  • /
  • /
  • Spammers switch from remedies to replicas

Spammers switch from remedies to replicas

Johannesburg, 19 May 2008

Spam promoting replica watches, pens and cheap jewellery has taken over from spam pushing male enlargement and sexual performance pills as the leading items for sale by spammers, according to new data released by Marshal's TRACE security team.

This breaks a two-year reign of health-related spam which has previously accounted for 75% to 80% of all spam in circulation based on Marshal's statistics.

According to Marshal's TRACE team, the trend towards product spam rather than health or remedy spam reflects the increased sophistication and maturity of the spam market.

"Health spam has accounted for the vast majority of spam since we started keeping records about its composition two years ago. This trend towards items such as jewellery and software suggests the spammers may be starting to increasingly understand their customers' buying behaviour and the wider appeal of certain products," said Bradley Anstis, Marshal Vice-President of Products.

The percentage of health spam (promoting pharmaceutical products and herbal remedies) in circulation has been eroded by substantial growth in the volume of product spam (promoting pirated software, replica watches and knock-off clothing labels).

Since January this year, the proportion of health spam in Marshal's spam traps has steadily reduced from 80% to 45%, while product spam has grown from 12% to 46% in the same period. Together the two categories account for more than 90% of all spam in circulation.

"A handful of major spammers are behind this shift in spam. They have the power to change the global make-up of spam thanks to sizeable botnets under their control," said Anstis.

Major botnets such as Pushdo, Mega-D and Srizbi, for example, are responsible for this current trend. They are being used to send out huge volumes of spam promoting replica products.

"There is an alarming level of consistency in the products being promoted across different botnets. It is clear that a small number of unprincipled operators are using these top spam botnets to push their products under brands such as Prestige Replicas, Exquisite Footwear, Canadian Pharmacy and Herbal King."

"The shift in focus from remedies to product replicas suggests the spammers have begun to appreciate differing levels of consumer confidence in the various products being promoted. Spammers might be thinking that counterfeit watches and pirated software have greater mainstream appeal with a wider audience than dubious pharmaceuticals that few people believe are effective."

Marshal also noted that a greater variety of counterfeit products are being promoted, some convincingly faking the genuine articles on legitimate looking Web sites.

"In the past, the kinds of replica products on offer were limited mainly to watches ripping off brands like Rolex or Tag Heuer. More recently we have seen spammers branch out into a wider range of designer products like handbags, shoes, pens and other accessories ripping off brands like Ugg, Prada, Versace and Dior," said Anstis.

More details on the changing trends in health and product spam can be found of the Marshal TRACE Centre: http://www.marshal.com/trace/traceitem.asp?article=637

Share

Marshal

Marshal is a global leader in content security across multiple protocols, enabling organisations to secure their IT environment, protect against threats and comply with corporate governance needs. Marshal provides customers with a complete portfolio of policy-driven e-mail and Internet solutions that integrate content filtering, compliance, secure messaging and archiving. Forty percent of the Global Fortune 500 companies use Marshal security solutions to secure their corporate messaging networks and Web access against internal abuse and external threats such as viruses, spam and malicious code. More than seven million users in over 18 000 companies worldwide use Marshal solutions to protect their networks, employees, business assets and corporate reputation and to comply with corporate governance legislation requirements.

Marshal is headquartered in London (UK) with offices in Atlanta (USA), Auckland (New Zealand), Houston (USA), Johannesburg (South Africa), Munich (Germany), Paris (France) and Sydney (Australia). More information is available at www.marshal.com.

The Marshal TRACE Team

TRACE (Threat Research and Content Engineering) is a group of Marshal security analysts who constantly monitor and respond to Internet security threats through the TRACE Web site at www.marshal.com/trace. TRACE services are provided as part of standard product maintenance that includes updates to Marshal's unique, proprietary anti-spam technology, SpamCensor. TRACE analyses spam, phishing and Internet security trends and provides frequent automated updates to Marshal customers. It also provides "Zero Day" security protection against new e-mail and virus exploits the day they emerge.