An Early Look at the State of Spam in 2009, Social Networking Spam on the Rise

Home / News

An Early Look at the State of Spam in 2009, Social Networking Spam on the Rise

By CircleID Reporter
January 09, 2009, 11:35 pm PST Views: 10,814 Comments: 1

As recently reported, spam volumes indicate spam has nearly jumped back up to its pre-McColo shutdown levels. However, Symantec’s The State of Spam report has also observed that in recent days spammers are increasingly piggybacking on legitimate newsletters and using the reputation of major social networking sites to try and deliver spam messages into recipients’ inboxes. “The social networking spam messages were carefully crafted to closely mimic the legitimate notification emails often distributed from social networking sites,” writes Dermot Harnett, a Symantec analyst.

In its special URL investigation, the report also indicates that on average approximately 90% of all spam messages today contain some kind of a URL. Additionally, analysis of data from past recent days, according to Symantec, has shown that 68% of all URLs in spam messages had a ‘.com’ Top-Level Domain (TLD), 18% had China’s ‘.cn’ ccTLD and 5% had a ‘.net’.

Additionally 71% of URLs in spam messages had no directories while 2.4% had more than six directories. “Similar to subdomains, scammers often use many directories as the spammers try to create URLs that look like legitimate URLs.”

In the first week of 2009, 68% of all URLs in spam messages had a ‘.com’ TLD, 18% had a ‘.cn’ ccTLD which is reserved for China and 5% had a ‘.net’ TLD. ‘.Ru’ is the ccTLD for Russia and ‘.de’ is ccTLD for Germany. Directories are often used to arrange or display certain files in URLs. Source: Symantec

Related Links:
The State of Spam, A Monthly Report – January 2009 Symantec Main Report, PDF
New Year Brings New Spam Attacks Dermot Harnett, Symantec Blog

NORDVPN DISCOUNT - CircleID x NordVPN
Get NordVPN [74% +3 extra months, from $2.99/month]

By CircleID Reporter — CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.
Visit Page

Filed Under

Comments

Our URL figures .. cn almost neck and neck with com .. not 68% .. 18% Suresh Ramasubramanian – Jan 12, 2009 2:51 AM

We publish ob.surbl.org by the way .. here’s something from our latest stats.

Domains blocked: 7193

Top 10 TLDs:
2882 .com
2837 .cn
984 .info
305 .net
64 .org
42 .biz
30 .ru
13 .uk
6 .us
5 .pl

Registrars:
1441 XIN NET TECHNOLOGY CORPORATION
Xin Net Technology Corporation (R118-LROR)
??????????????
1412 ????
775 CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
CSL Computer Service Langenbach GmbH d/b/a joker.com (R161-LRMS)
589 ONLINENIC, INC.
ONLINENIC, INC. D/B/A CHINA-CHANNEL.COM
OnlineNIC Inc. (R64-LROR)
OnlineNIC, Inc. (R170-LRMS)
415 MONIKER ONLINE SERVICES, INC.
MONIKER ONLINE SERVICES, LLC
Moniker Online Services Inc. (R145-LROR)
Moniker Online Services Inc. (R245-LRMS)

etc etc

# 1 Reply | Link | Report Problems

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.