Our first spam prevention guide is now posted. It is titled, Preventing Spam in the Home or Home Office. It has some great tips on controlling spam when you have 3 computers or less.

Coming soon, we’ll have guides on stopping spam in a small business and another on stopping spam in a midsized environment.  (50-200 users)  We’ll also compare the server based solutions availible.

Citibank needs a better spam filter. Not happy with the typical Nigerian 419 email scam, one man aimed a bit higher, prosecutors say. Paul Gabriel Amos, 37 a citizen of Nigeria has been charged in New York with one count of conspiracy to commit bank and wire fraud in an attempt to swindle Citibank out of $27 million.

Amos is accused of an elaborate scheme starting in September when Citibank received forged documents authorizing fax transactions from an account held by the National Bank of Ethiopia. The documents also listed contact information for people who could give voice approval for the fax transactions.

In October, Amos is accused of initiating dozens of transactions totaling $27 million from the National Bonk of Ethiopia’s account to accounts controlled by his co-conspirators. The telephone numbers listed for authorization were cell phones in Nigeria.

The scam was discovered when some of the receiving banks returned the money because they could not contact the owner of the accounts. The amount actually transferred to the scammers is unknown, although Citibank is covering any losses.

The granddaddy of all social marking sites Digg was hit with a massive comment spam attack according to Panda, with nearly a million spam comments dropped.

Over the past few months we have noticed attacker efforts to maximize blackhat SEO tactics and increase infection rates at the same time by abusing the popular social news aggregate site Digg.com. Digg allows users to create, vote, and comment on news stories.

Malware distributors have been creating false stories with catchy subject lines as an attempt to bait users into clicking links which lead to Malware. In some cases the attackers do not create the news story themselves, rather linking to others relevant content.

The idea was to lure users to a site to see controversial video then tell them they needed a video codec to see it…  Of course it wasn’t a codec it was malware.

Dancho Danchev has the complete list of domains used and the number of bogus comments pointing to each.

Like snowbird NFL fans flocking to Hawaii for the Pro Bowl, (although the idiots in the NFL moved it next year) February means more spam in your mailbox. Along with florists and candy makers, spammers hope to cash in on Valentine’s Day by hawking watches, jewelery and solutions to -um- male insecurities.

But they are not just stopping there this year. They are also using Valentine’s Day to push more malware for their botnets.

The Waledec spammers are pushing a fake Valentine’s day e-card hoping you install they’re botnet software for them. (beware) They also did this for Christmas.

Cutwail, Pushdo, Donbot are pushing p0rn and the usual trash. Donbot say “someone thinks you are very special and has sent you a kiss” I believe this is botnet bait also.

With every passing month it shows how much spam and malware are joined at the hip. Remember, be careful what you download.

Brian Prince over at eweek reminds us of one of the dumbest things we’ve ever heard from anyone in the tech industry.

This month marks the five year anniversary of a bold prediction by Microsoft co-founder Bill Gates, who prophesized at the World Economic Forum in 2004 the spam problem would be solved in two years. Turns out, it was not a Nostradamus moment for IT security.

Predicting security trends is not an exact science.

A prime case in point is Microsoft co-founder Bill Gates, who predicted  at the World Economic Forum in Davos, Switzerland, in January of 2004 that spam would be “solved” within two years. Fast forward to 2009 – spam remains a nuisance to corporate networks and consumers alike.

A key part of Gates’ prediction was that it we would have the option to charge people to send us e-mails. If a relative sent you an e-mail, for example, you could let it in for free. However, if the e-mail came from an unknown address, you could charge them money.

Of course this would never work. I blogged at the time (on a different blog) that the only reason he said it was because he was hoping Microsoft would handle the payment processing.

The whole thing was absolutely ridiculous. Bill Gates must be the dumbest billionaire on record. It’s ironic somebody who knows so little about technology became the richest man in the world because of it.

Did We Step On Some Toes?

January 9, 2009

Hmmmm… not long after we launch, the blog is hacked and used to spend spam. (BTW it was caused by on old script by another user on the same server) Wonder if it was a coincidence or did we step on some toes? I assume coincidence but I have to wonder…

At any rate, we’re back, just have to upload some images to the server.