Among the lead culprits in the spam overflow is a new take on an old technique called image-based spam. By definition, image-based spam contains its unwanted content inside of graphics, making it difficult for some spam filters to identify.
According to a new study from e-mail security vendor IronPort, image-based spam in June of 2006 represents 12 percent of all spam, up from only 1 percent in June of 2005.
Security firm CipherTrust reports an even higher percentage of image-based spam at 15 percent.https://o1.qnsr.com/log/p.gif?;n=203;c=204650394;s=9477;x=7936;f=201801171506010;u=j;z=TIMESTAMP;a=20392931;e=i"While using images in spam is not a new concept, changing the image in real-time in each delivered spam message is a relatively new capability that the spammers have been able to acquire," Dmitri Alperovitch, research scientist with CipherTrust told internetnews.com.
"This is due to the development and release of the new high-performance software marketed in the underground markets that is able to randomize images in a very high-performance fashion and allow spammers to send millions of them every hour."
Each of those messages may well appear to be unique to the spam filters, which makes identification particularly challenging. Craig Sprosts, senior product manager at IronPort, noted that with the tool each spam message is as unique as a snowflake.
An increase in the number botnots and their associated zombies is also helping to drive increasing volumes of unwanted content into inboxes. Botnets are made up of armies of compromised zombie machines that are controlled by a malicious host that has infected them in some way.
IronPort's data suggest that more than 80 percent of spam is sent via a zombie. That percentage is likely to be fueled by the increasing number of new zombies as well.