To print: Click here or Select File and then Print from your browser's menu

This story was printed from silicon.com, located at http://www.silicon.com/

Story URL: http://www.silicon.com/research/specialreports/thespamreport/0,39025001,39159464,00.htm

Taiwan fingered as spam hub
Its servers spawn 64 per cent of the stuff...

By Candace Lombardi

Published: Monday 12 June 2006

The majority of spam servers are physically located in Taiwan, according to CipherTrust.

In research conducted in May, the email security company found that 64 per cent of machines sending out junk mail were in that country. Next was the US with 23 per cent and third China, with three per cent.

CipherTrust also determined that unwanted email traffic went up as much as 20 per cent worldwide in May. The data was gathered using CipherTrust's network of fake "zombie" computers, among other sources, the company said. Spammers typically use networks of zombies, or compromised PCs used without their owners' knowledge, to send out their junk messages.

The company attributed the spam rise to two factors: the demise of anti-spam efforts by Blue Security, and growing use by spammers of image-only emails to defeat filters.

After a distributed denial of service attack at its service provider, Six Apart, Blue Security announced it would cease its anti-spam activities. The Israeli company ran an effort called Blue Frog, which enlisted people to send replies to unwanted emails, resulting in a barrage of messages to spam servers.

Dmitri Alperovitch, a CipherTrust research engineer, said on Friday: "They [Blue Security] had hundreds of thousands of clients."

As for image-based spam, it's now one of the most popular ways for spammers to combat filters, he added. Text is placed into a message as an image. This allows them to fool some systems that use textual recognition to parse the words of a message to identify emails as spam.

Using images, spammers can also more easily alter the print, background colour and other identifying factors used by message analysis tools, Alperovitch said.

He said: "It's hard to identify as spam, unless you are using optical-recognition technology, trying to identify characters within an image to recognise as text."

But optical-recognition technology is typically not appropriate for use in anti-spam systems because it's fairly slow and not very accurate, he said.

Alperovitch also said CipherTrust saw 7.4 million new zombies in May. About 24 per cent of them are located in China, 9.4 per cent in the US and 7.5 per cent in Germany. However, Alperovitch noted, spam servers number in the thousands only.

He said: "There are about 5,000 servers which are actually sending the spam to the zombies. Most people would not even see the spam server. Their interaction is only ever with the zombies out there."

Candace Lombardi writes for CNET News.com