Security Market Segment LS
×

Warning

JUser: :_load: Unable to load user with ID: 3286
JUser: :_load: Unable to load user with ID: 63
Tuesday, 05 August 2008 17:47

Google Sites sending spam as CAPTCHA gets pwned

By
According to the latest MessageLabs Intelligence Report, the Google Sites CAPTCHA spambot defences have been compromised by spammers...

The MessageLabs Intelligence Report for July 2008 reveals that spammers are looking towards Google Sites to spread their wares. This follows on from previous spam attacks directed at Google Docs, Google Pages and Google Calendar.

Researchers look at it as being just the latest in a continuing trend that targets Google's hosted applications in order to exploit the brand trust to distribute spam and malware. There are two reasons why Google Sites has been targeted, they say:

Firstly, it allows the novice to create a web page that comprises entirely of a string of random letters and numbers with relative ease. This results in a URL that is far more difficult to block than most when using bog-standard signature-based anti-spam tools.

Secondly, and a lot more worryingly so, is the indication that the 'Completely Automated Public Turing Test to Tell Computers and Humans Apart' or CAPTCHA entry validation system has been pwned.

"Google Sites is yet another way that spammers have programmatically defeated CAPTCHA mechanisms" Mark Sunner, Chief Security Analyst at MessageLabs insists "While Google Sites spam accounts for only 1 percent of all spam currently, we anticipate that this technique's popularity will rival that of its predecessors, Google Docs, Calendar and Pages spam. If this is the case, then we may see spam levels increase in the months ahead." 

Not the best of news, it has to be said. But then neither is the fact that the number of new malicious websites blocked each and every day in July increased by a whopping 91 percent from 2,076 compared to June. This takes the daily total up to a rather depressing average of 3,968 new sites.

So what is to blame? Other than the obvious dirty scumbag spammers answer, is the equally obvious SQL injection attacks one. "An emerging theme for threats this month seems to be new variations on old attack methods" Sunner told us.

Want to know which country is the most spammed in the world? Find out on page 2...

CONTINUES


So which country was the most spammed in July 2008? All will be revealed in a moment.

Some of the 'highlights' of the report include:


The global ratio of spam in email traffic from new and previously unknown bad sources was 75.1 percent (1 in 1.33 emails), a decrease of 1.4 percent since June.

The global ratio of email-borne viruses in email traffic from new and previously unknown bad sources was one in 148.2 emails (.67 percent), a decrease of 0.07 percent since June.

A total of 3 percent of email-borne malware contained links to malicious sites, a decrease of 17.3 percent since June.

Phishing activity rose by .19 percent compared with the previous month. One in 180.6 (.55 percent) emails comprised some form of phishing attack.

Spam levels in the UK reached 69.9 percent in July and 74.6 percent in Canada. Germany's spam rate reached 70 percent and spam rose to 70.6 percent in the Netherlands. Spam levels in Australia were 64.1 percent, 72.9 percent in China and 67.8 percent in Japan.

The largest increase of .48 percent in virus activity was observed in Canada where virus levels of 1 in 80.7 put the country in third place for July.

Virus levels for the US were 1 in 243.7 and 1 in 110.3 for the UK and 1 in 214.8 for Germany. In Australia, virus levels were 1 in 303.1 and 1 in 378.6 for Japan. 

And the most spammed country was...

Switzerland remained the most spammed country with levels reaching 84.2 percent of all email. The largest increase in spam levels this month was observed in the United States where it rose by 5.9 percent to 79.8 percent.
Read 9440 times

Please join our community here and become a VIP.

Subscribe to ITWIRE UPDATE Newsletter here
JOIN our iTWireTV our YouTube Community here
BACK TO LATEST NEWS here




EXL AI IN ACTION VIRTUAL EVENT 20 MARCH 2025

Industry leaders are looking to transform their businesses and achieve measurable outcomes with AI.

As organisations across APAC navigate the complexities of AI adoption, this must-attend event brings together industry leaders, real-world demonstrations, and visionary panel discussions to bridge the gap between proof-of-concepts and enterprise-wide AI implementation.

Learn how to overcome common challenges in deploying AI at scale.​

Unlock cost savings, efficiency, and better customer experiences with AI.

Discover how industry expertise and data intelligence enable practical AI deployment.

Register for the event now!

REGISTER!

PROMOTE YOUR WEBINAR ON ITWIRE

It's all about Webinars.

Marketing budgets are now focused on Webinars combined with Lead Generation.

If you wish to promote a Webinar we recommend at least a 3 to 4 week campaign prior to your event.

The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://itwire.com/itwire-update.html and Promotional News & Editorial. Plus a video interview of the key speaker on iTWire TV https://www.youtube.com/c/iTWireTV/videos which will be used in Promotional Posts on the iTWire Home Page.

Now we are coming out of Lockdown iTWire will be focussed to assisting with your webinars and campaigns and assistance via part payments and extended terms, a Webinar Business Booster Pack and other supportive programs. We can also create your adverts and written content plus coordinate your video interview.

We look forward to discussing your campaign goals with you. Please click the button below.

MORE INFO HERE!

BACK TO HOME PAGE

Share News tips for the iTWire Journalists? Your tip will be anonymous

Subscribe to Newsletter

*  Enter the security code shown: img0

WEBINARS & EVENTS

CYBERSECURITY

PEOPLE MOVES

GUEST ARTICLES

Guest Opinion

ITWIRETV & INTERVIEWS

RESEARCH & CASE STUDIES

Channel News

Comments