Phishing attacks have risen sharply even though spam has declined to its lowest level since 2008, a new report reveals.. For September 2010, spam comprised 89.4% of all email, down from 92.5% in August, according to a new report from Symantec. The September total was the lowest level since 2008, when rogue ISP McColo was shut down. Phishing jumped by 52% in September from the month before. "This [phishing increase] was primarily due to an increase in both automated toolkit attacks and unique phishing websites," said Symantec. Meanwhile, the number of phishing websites -- generated by automatic toolkits -- increased by 46%, unique URLs increased by 83% and phishing websites with all-numeric IP domains -- such as -- rose by roughly 35%. The link for this article located at Information Week is no longer available. . In March 2015, ransomware incidents surged by 47% while unsolicited emails dropped to their lowest level since 2010.. Phishing Trends, Email Security, Cybersecurity Techniques. . LinuxSecurity.com Team
This is a short but pithy CERT Security Tip, which you may want to consider forwarding to your end-users, or friends and relatives to complain that they don't know what to do about their spam problem. It is a collection of common-sense best practices for reducing the volume of spam clogging up your computers and network, from a user standpoint. . . .. Reducing Spam Spam is a common, and often frustrating, side effect to having an email account. Although you will probably not be able to eliminate it, there are ways to reduce it. What is spam? Spam is the electronic version of "junk mail." The term spam refers to unsolicited, often unwanted, email messages. Spam does not necessarily contain viruses--valid messages from legitimate sources could fall into this category. How can you reduce the amount of spam? There are some steps you can take to significantly reduce the amount of spam you receive: * Don't give your email address out arbitrarily - Email addresses have become so common that a space for them is often included on any form that asks for your address--even comment cards at restaurants. It seems harmless, so many people write them in the space provided without realizing what could happen to that information. For example, companies often enter the addresses into a database so that they can keep track of their customers and the customers' preferences. Sometimes these lists are sold to or shared with other companies, and suddenly you are receiving email that you didn't request. * Check privacy policies - Before submitting your email address online, look for a privacy policy. Most reputable sites will have a link to their privacy policy from any form where you're asked to submit personal data. You should read this policy before submitting your email address or any other personal information so that you know what the owners of the site plan to do with the information. * Be aware of options selected by default - Whenyou sign up for some online accounts or services, there may be a section that provides you with the option to receive email about other products and services. Sometimes there are options selected by default, so if you do not deselect them, you could begin to receive email from lists those lists as well. * Use filters - Many email programs offer filtering capabilities that allow you to block certain addresses or to only allow email from addresses on your contact list. Some ISPs offer spam "tagging" or filtering services, but legitimate messages misclassified as spam might be dropped before reaching your inbox. However, many ISPs that offer filtering services also provide options for tagging suspected spam messages so the end user can more easily identify them. This can be useful in conjunction with filtering capabilities provided by many email programs. * Don't follow links in spam messages - Some spam relies on generators that try variations of email addresses at certain domains. If you click a link within an email message or reply to a certain address, you are just confirming that your email address is valid. Unwanted messages that offer an "unsubscribe" option are particularly tempting, but this is often just a method for collecting valid addresses that are then sent other spam. * Disable the automatic downloading of graphics in HTML mail - Many spammers send HTML mail with a linked graphic file that is then used to track who opens the mail message--when your mail client downloads the graphic from their web server, they know you've opened the message. Disabling HTML mail entirely and viewing messages in plain text also prevents this problem. * Consider opening an additional email account - Many domains offer free email accounts. If you frequently submit your email address (for online shopping, signing up for services, or including it on something like a comment card), you may want to have asecondary email account to protect your primary email account from any spam that could be generated. You should also use a secondary account when posting to online bulletin boards, chat rooms, public mailing lists, or USENET so that you can get rid of when it starts filling up with spam. * Don't spam other people - Be a responsible and considerate user. Some people consider email forwards a type of spam, so be selective with the messages you redistribute. Don't forward every message to everyone in your address book, and if someone asks that you not forward messages to them, respect their request. _________________________________________________________________ Both the National Cyber Security Alliance and US-CERT have identified this topic as one of the top ten for home users. _________________________________________________________________ Authors: Mindi McDowell, Allen Householder _________________________________________________________________ Copyright 2004 Carnegie Mellon University. Terms of use: This document can also be found online at /news-events/news/reducing-spam . Reducing Spam Spam is a common, and often frustrating, side effect to having an email account. Altho. short, pithy, security, which, consider, forwarding, end-u. . LinuxSecurity.com Team
Open relay spam is dying out as a problem, according to a survey published today that is likely to raise eyebrows in the spam-fighting community. Only one per cent of corporate UK mail servers tested by security testing firm NTA . . . . Open relay spam is dying out as a problem, according to a survey published today that is likely to raise eyebrows in the spam-fighting community. Only one per cent of corporate UK mail servers tested by security testing firm NTA Monitor last year were poorly configured in a vulnerable way that allowed spam to be distributed by 'open relay'. In 1997, 91 per cent of servers tested by NTA Monitor were similarly vulnerable. . The prevalence of open relay spam is decreasing significantly, with recent studies indicating that merely 1% of susceptible mail servers are present in the UK. Learn additional insights!. Email Protection, Open Relay, Spam Reduction, Mail Servers, Security Testing. . Anthony Pell
The problem: too much spam. Unsolicited advertising email continues to account for untold business losses each year. To give you an idea of the scope of the problem, in 1998 AOL reported that of the approximately 30 million email messages its . . . . The problem: too much spam. Unsolicited advertising email continues to account for untold business losses each year. To give you an idea of the scope of the problem, in 1998 AOL reported that of the approximately 30 million email messages its servers handled each day, between 5 and 30 percent were spam. Assuming that this rate is true for other email providers as well, spam takes a significant economic toll on business, not merely in terms of Internet resources, but in lost employee productivity as well. Sometimes, whether you receive bulk email is just the luck of the draw. Target addresses are often generated at random, or constructed from common usernames and domains. My own mail server is configured to forward any mail sent to my domain, regardless of address, straight to my account. Among the legitimate mail, I notice lots of spam for variations on hesketh.net (for example,
Get the latest Linux and open source security news straight to your inbox.