While, for the average end user, spam has become less of a problem over recent years as spam filters get better at what they do and simply remove much of it from sight, that doesn't mean that spam volumes are actually reducing. In fact, the opposite is true and the actual amount of spam flowing through the Internet is still ridiculously high. What's more, the spammers are becoming increasingly adept at adapting to ongoing trends and exploiting them to get their often unsavoury message across.
According to the latest Internet Threats Trend Report for Q1 2010 to be published by Commtouch Labs, spammers are now well and truly using the familiar to inspire end user action. Indeed, by using the most familiar of Internet names the spammers are able to give a deceptive legitimacy to billions of emails they send. So, for example, you'll find that between five and ten percent of all spam by volume would appear to have originated from some Gmail account or other. That does not, however, mean that the same volume actually emanates from Gmail.
The message style of Gmail, along with Facebook and PayPal rather commonly, is copied and templated by the spammers, including those with both malware and phishing payloads, in an attempt to use familiarity to bypass human common sense and automated filtering alike. By downplaying the more 'phishy' elements of an email, and playing up the average Gmail message construction instead, spammers hope to evade detection until it is too late.
“Spammers and cybercriminals use experimentation to reach their goals,” said Asaf Greiner, Commtouch vice president, products. “They are always testing new techniques to lure their victims, from using familiar formats and domains to creating entirely new ways to entice action.”
Commtouch’s quarterly trend report is based on the analysis of more than two billion email messages as well as the GlobalView URL database within the company’s cloud-based global detection and classification centres. Reported global spam levels are based on Internet email traffic as measured from unfiltered data streams, not including internal corporate traffic. Therefore global spam levels will differ from the quantities reaching end user inboxes, due to several possible layers of filtering.
The highlights include: