Your naked video reveals a bot behind the email

happygeek 0 Tallied Votes 268 Views Share

How stupid do you have to be to get caught by spam email with the subject line of 'we caught you naked [your name] - check the video' is a question I have been asking myself today. Not because I have been caught naked, and if I had my only concern would have been for the poor soul subjected to the visual ordeal. Not even because I have received such a spam myself, at least not that I am aware of as my spam trap would have swallowed it whole and spat it out in bits before I knew about it. Nope, more because I really do feel for the kind of village idiot hopeful who would click on the link to that supposed video.

Of course those who do, and given the fact that this particular one has gone global and is hitting mailboxes as you read this according to the Marshal TRACE security team, will not see the offending (or should that be offensive) video and in fact will not see anything. You will, however, be volunteering your PC resources as part of the globally spamming and malware infecting Srizbi botnet instead.

Srizbi is the biggest of all spam-sending botnets currently plying its trade on the Internet, and according to Marshal is responsible for no less than a whopping 45 percent of all the spam that its own networks identify. Marshal is not alone in making this call, others have also described Srizbi as the world's largest botnet for good reason. It is built with some 315,000 bots and growing, responsible for at least 60 billion spam messages each and every day right now.

Bradley Anstis, Marshal VP, says of the naked video spam "the message seeks to embarrass you by claiming to have video footage of you naked. The spammers are clearly hoping to shock unsuspecting recipients into investigating this compromising footage. In their haste to look into the claim, some people might not consider the link in the message leads to Malware " and adds "In December last year, we attributed 20 percent of the spam we caught to Srizbi and now it is more than double that. It is also more than double the next biggest botnet in terms of its spam volume. We have observed individual Srizbi bots sending as much as 8,000 spam messages per hour."

Dani AI

Generated

Useful, practical steps for anyone who sees (or falls for) the “naked video” style scam mentioned by — and a reminder of ’s point that human judgement is the best first line of defense.

Immediate actions (if you clicked or think you might be compromised)

  • Disconnect the PC from the network immediately (unplug Ethernet / turn off Wi‑Fi) to stop any ongoing outbound activity.
  • From a different, known-clean device change passwords for email, banking and any sites that share the same password; enable two‑factor authentication where available.
  • Check your email account (via webmail) for new forwarding rules, auto‑reply changes, or unfamiliar “sent” items and remove any unauthorized rules.
  • Run a full offline/boot-time scan with an up‑to‑date antivirus + a reputable anti‑malware tool; if available, use a rescue USB/CD scanner from a trusted vendor.
  • Preserve the original message (save the .eml) and headers before deleting — headers help track the source if you report the incident.

Quick checks to gather evidence

Run these on the suspected PC (Windows/Linux) to spot active connections or odd processes:

# Windows (run in cmd as Administrator)
netstat -ano | findstr ESTABLISHED
tasklist /FI "STATUS eq RUNNING"

# Linux
lsof -i -n -P
ps aux --sort=-%cpu | head

What to do if the machine is clearly infected

If you see unexplained CPU/network use, unknown scheduled tasks, or outgoing mail, assume compromise: back up personal files (avoid executables), wipe and reimage from known-good media, then restore documents only after scanning. Reset credentials again from a clean device.

Prevention and follow‑up

Keep OS and software patched, use unique passwords + 2FA, educate contacts not to open sensational links, and report the scam to your email provider/IT team. If you manage mail infrastructure, verify mail server configurations (SPF/DKIM/DMARC) and check queues/relay logs.

EddieC 0 Posting Whiz in Training

I'm amazed at how many people are fooled by this type of trickery. Being a techie myself, people are always asking me "what's the best virus protection to get?"

My answer is always the same: "The most effective protection from viruses, phishing and all types of malware is right between your ears."

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.