New Flavour of Spam - MP3 Stock Scams 170
An anonymous reader writes "Spammers are back with a new trick, this time round sending messages with MP3 attachments that contain the latest pump-and-dump stock scams. One sample identified by Sophos was a heavily distorted 30-second MP3 file. A synthetic female voice was used to promote a particular stock. Says Graham Cluley, senior technology consultant at Sophos: 'Although the spammers seem to have a fair bit to learn about machine-generated sales patter, some companies might consider blocking all MP3s in email as a matter of course. So many music files infringe copyright, and it can be hard for a company to establish which ones are legal and which are not after they have arrived. Blocking MP3s, or at least quarantining until requested by the user, can be a good way for a company to take a proactive stance against the use of email for illegal file sharing. It also has the benefit of neutralizing this sort of spam at the same time.'"
Well hey now (Score:5, Funny)
Won't you think of the shady day-traders?
Re: (Score:2)
2) Pump and dump stock
3) ????????????
4) Feed the Shady day-traders family.
Better idea: block all text in email (Score:5, Funny)
Re: (Score:2, Funny)
We can all go back to hand written letters and slide rules--- well maybe adding machines are OK. Who needs all this new fangled computer stuff. The plain old phones work well for those who can't wait for the mailman. We get lots of paper junk mail also, but at least we get a little heat from that when it is consumed in our wood stove.
Re: (Score:3, Insightful)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
The interesting aspect to spam that these silly spammers don't seem to realize is that they still can't get around a well designed bayesian spam filter. All you have to do is filter on the tokens and the match /mp3/ will naturally rise to the top with sex, viagra, and other spew. It might take a while to get the filtering to work if you have a history of accepting mp3 files. Otherwise it will take only a dozen.
I have been using bayesian spam filters as the only means of filtering spam and they always be
Re: (Score:3, Funny)
And the best part: the solution doesn't sound like contrived RIAA propaganda. I mean, really. Who ever heard of mp3 files that infringe copyrights?
Re:Better idea: block all text in email (Score:4, Funny)
And the best part: the solution doesn't sound like contrived RIAA propaganda. I mean, really. Who ever heard of mp3 files that infringe copyrights?
And the: the solution doesn't sound contrived propaganda. I, really. Who heard of mp3 files infringe copyrights?
It worked (Score:2)
Show of hands, please... (Score:2, Funny)
Re: (Score:2)
Not a chance. Way too subtle, and thinking too many steps ahead to be a creation of the clumsy, heavy hands of the RIAA.
Not that they would be above wasting the resources of innocent third parties via illegal pump and dump emails to try to hamper the efforts of copyright infringers, it's just a bit too clever to be their invention.
Re: (Score:2)
Re: (Score:2)
Ugh, please don't block file types... (Score:5, Informative)
So of course, now the instructions to use my script have to include renaming exe files after unzipping.
Re:Ugh, please don't block file types... (Score:4, Informative)
Re:Ugh, please don't block file types... (Score:5, Funny)
Re:Ugh, please don't block file types... (Score:4, Informative)
Re: (Score:2)
As another poster pointed out, I should have just renamed the zip file to
Re: (Score:2)
Password protecting a zip archive still allows for a directory listing. Most filterers that reject email based on filename simply preform a zip contents list, and reject based on the results. Most filtering solutions will separately attempt to extract the ZIP for virus scanning.
Although I don't have any direct experience with it, a zip password and encrypting the filenames you mentioned should allow your email to bypa
Re: (Score:2)
However, zipping a file just now, I see in WinRAR I'm not given the option to "encrypt filenames" when putting a password on a ZIP. I g
Re: (Score:2)
Zip the files as normal, with an innocuous name like files.zip. Place that file in a password-protected zip file. Job done.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
You have the choice of "ban executable attachments" or "increased risk of something making it through your antivirus scanning". Frankly, I think both options are pretty awful. But I would far rather deal with the occasional hacked off user than the aftermath of an executable containing something nasty. I've seen that before and it really isn't much fun, even in an otherwise reasonably well managed network.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
More of a risk in an environment where people are using ordinary email clients rather than web-based ones, though.
Re: (Score:2)
Re: (Score:3, Interesting)
For one company I exchange email with I have to pgp encrypt most types of potentially executable code, including ksh scripts, then strip the PGP headers and footers and send the raw base64. Its the only way to get it through their mail system.
320Kbps MP3 Spam... (Score:5, Funny)
Re:320Kbps MP3 Spam... (Score:4, Funny)
Re: (Score:2)
well, what kind of smoothie did you think it'd be?
What's the saying about a fool and his money? (Score:4, Insightful)
This isn't a scam, it's economic darwinism.
Re: (Score:2)
It is in smart people's best interest to make sure that stupid people are as rich as possible.
Re: (Score:2)
That Spam won't exist for long (Score:4, Insightful)
So I'd guess this is a short lived problem.
Re: (Score:3, Interesting)
Re: (Score:2)
(I say I got one, I actually got the same one 6 times to 3 mailing lists I adminster.)
Lotus Notes does... (Score:2)
Why you would thank that supporting file types would mean that you should not use an application is baffling.
Re: (Score:2)
For the very same reason I don't want mail programs to support scripting or other "active" things. It's not necessary, serves pretty much no sensible purpose and a potentially large security hole.
A mail program should enable me to transfer mails. Possibly with attachments (although that's something it was never designed for nor is suited for). I can see that in a corporate environment cooperative too
Re: (Score:2)
Unified Messaging.
Re: (Score:2)
afaik there's no built-in support for MP3 in the various mail programs (and if there is, that's at best a reason NOT to use a certain mail client).
I disagree. Apple Mail supports inline media attachments supporting everything Quicktime does. I find the mp3 an excellent way to attach voicemail to email and use it all the time. if a particular mail client doesn't support inline mp3s, to me this is a reason *NOT* to use it! It's very nice to manage voicemail with the exact same tools as email.
This was a triumph. I'm making a note here... (Score:2)
Just how serious are they about canning spam? (Score:2)
Re: (Score:2)
Who falls for this stuff? (Score:2)
No one "falls" for it. (Score:5, Insightful)
These are the people who know it's wrong and don't have the guts themselves to run a stock scam
I didn't say they were very smart.
Re: (Score:2)
But what I wanted to pick up from your post was "These are the people who know it's wrong" - I don't really get why it is considered immoral by people who play the game anyway. I understand the argument that capitalist accumulation is inherently immoral
Re:No one "falls" for it. (Score:5, Informative)
They buy a load of them at the normal price over a period of time, then sell them at an inflated price to the people they spam. By the time they send out the spam, the price has gone up, and it is already too late to profit from the upside.
Re: (Score:2)
But it's so cheap! I can buy 100,000 shares!!! When it goes up just a dollar, I'll be RICH!
Is the pool of idiots with investment dollars actually big enough
History has shown that the pool of stupid people with money is bottomless. In fact, we can all take turns once in a while. You want to be next?
Thankfully I use .ogg (Score:2)
Why are they really doing it? (Score:4, Insightful)
Re: (Score:2, Informative)
According to some analysts, that is in fact the intention. The Spam is not meant to artificially inflate the price for a short time, but rather to depreciate the stock. Not so much to ruin the target company, but rather because the spammers can short the stock and make a bit of money on the short-term depreciation.
I'm not sure if it's true or not... but I must admit
Re:Why are they really doing it? (Score:4, Informative)
Not this shit again...
You can't short a penny stock.
Here's a dumbed down guide to how shorting works:
If you want to borrow a NYSE/NASDAQ stock, your broker will be happy to help (they charge interest and take the shares from another person's account). But if you ask about borrowing a penny stock, they'll tell you to fuck off.
Re: (Score:2)
You're Giving Them Ideas . . . (Score:2)
At least, that's what I assumed. The filename was gloriaestefan.mp3 but I didn't listen (duh), so I can't be certain.
Re: (Score:2, Funny)
Re: (Score:2)
*checks email*
Damn, one newsletter, one real message, no mp3 spam
Re: (Score:2)
gloriaestefan.mp3?
One-two-three-four, come on baby check your email, five-six-seven times...
Re: (Score:2)
VOIP? (Score:5, Interesting)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
mp3s with payload? (Score:2)
Maybe there's more to this than meets the eye? WinAmp (still widespread) has had multiple arbitrary code execution vulnerabilities in the past, through ID3 tags, the mp3 stream itself, etc. I wouldn't be surprised if someone found similar things in iTunes or Windows Media Player as well.
Are those mp3s sound recordings only?
new virus vector .. (Score:2)
must invest
was: Re:mp3s with payload?
What I want to know... (Score:3, Interesting)
Re: (Score:2)
I've also heard people make statements with a questioning inflection.
The RIAA is behind this... (Score:5, Informative)
Email File sharing MP3's? (Score:2)
Ya, sounds like a huge problem facing companies today. Tech journalism rocks sometimes.
New setting needed (Score:3, Insightful)
Re: (Score:3, Insightful)
Re: (Score:2)
They sender would then know
that the address works and will then sell it to other spammers, thus vastly increasing the amount of spam you receive. Real smart.
I already get spam to 133 user accounts at my domain that have never responded to a spam, not including minor variations on some usernames with added or deleted characters, start with a digit, or contain more than two consecutive digits in the username. (The majority are now usernames a spammer used when sending mail forged as being from my domain.)
Sometimes I think that maybe if my domain didn't look like it was a catch-all and had instead bounced those first e-mails addressed to users like a1aaa1azzzz1z
Bouncing doesn't help (Score:2)
Don't count on it. I religiously bounced non-account mail for the first 3 years of my current domain. It's made 0% difference. I do roughly track the non-account names. Many are simply random gibberish, and those
Re: (Score:2)
Re: (Score:2)
I've said it before, and I'll say it again:
EMAIL IS NOT THE SOLUTION FOR ALL YOUR BUSINESS NEEDS.
It is a person to person messaging system. It is NOT designed to be used by automated systems and anti-spam systesm should NOT take the needs of automated systems into account. Tough crap if it screws up your obnoxious mass mailing system that you CLAIM is not spam.
You want a way to send large emails to everyone? fine. YOU make it work. It is not our responsibility to he
I got paper-mail pump-n-dump spam yesterday... (Score:2)
What's next? (Score:2)
*I could actually see this happening, if spammers start luring in users by harvesting random MP3s found on botnets and appending their audio spam to the end of the file.
I think satan just spoke to me, pump-n-dump porn (Score:4, Funny)
Wow, that spam plan is so evil, I think the Russian mafia is coming to kill me.
Re:I think satan just spoke to me, pump-n-dump por (Score:3, Funny)
Re:I think satan just spoke to me, pump-n-dump por (Score:2)
I, for one, welcome our new implied-porn marketing overlord, and look forward to seeing your work during the next Superbowl. And then twice during every show after that.
"Illegal file types" (Score:2)
I doubt this will fly for long (Score:2)
This reduces their rate of return on the spam, and encourages them to try to find ways to minimize the size of the spam so it can get th
Re: (Score:2)
Re: (Score:2)
I see this as merely an experiment by spammers. If it works, we'll see more of it. If it doesn't, it will go
Re: (Score:2)
However, even there, the spammer probably does care - because the more screwed up the bot machine becomes, the quicker it will be wiped and reinstalled or disinfected, and thus the lower the sending rate (at least if the bots that go off the botnet aren't replaced as fast by new bots), and again the lower the rate of return on the spam. Also, ISPs are going to detect the mass sending of larger files faster than they do smaller email
Got one (Score:4, Funny)
Re: (Score:2)
hawk
Sound isnt new.. (Score:2)
It also eliminates the nosies people stick on webpages as well.
Sure makes blocking easy (Score:2)
I never understood how image spam, and to some extent even HTML spam, lasts so long without being quickly crushed by filters. An email that has any sort of attachment (sheesh, even a PGP/MIME signature) is either spam, or it's from someone I know (i.e. whitelisted).
Countering audio attachments should be absolutely trivial if you have a filter, and it's hard to imagine that anyone is able to use email without a filter these days. If it has any attachment and it's from someone you've never corresponded wit
Re: (Score:2)
Re: (Score:2)
I tend to go even further: if it's got an attachment and I'm not expecting a specific attachment from that particular sender at that time, it's spam. A lot of viruses send to addresses in the local address book, so just because I know the sender doesn't mean they haven't gotten infected and it's the virus sending me spam/malware. So my policy is that if people want to send me files they can either put them up on a server and send me the location so I can download it, or they can contact me beforehand and fi
Got a bunch today (Score:3, Insightful)
You can't understand it. Think a million times worse than Max Headroom on a cell phone. It's so noisy and distorted that you can barely make out that it is a female voice much less interpret the stock symbol she is attempting to SPELL! I have a nice noise canceling headset for my phone and still have to use the phonetic alphabet to spell things on the phone. How do they expect this to work?
They are huge. Mine passed my spam filter simply because I've never had a spam bigger than 100KB, so I haven't ever bothered to filter them. I guess things like the Storm botnet are changing the limits of this, but still, 100KB is 10-100 times the amount of data vs a normal spam that you have to send out to plaster your message onto everyone's inbox.
The real take-home message here is that while there is quite a lot of mention about how the spammers are 'having to get innovative' the reality is that they are having to get desperate. There is no innovation in sending a unique audio message to somebody via email. But when they have to bypass all existing spam filters in addition to having to resort to sending out huge, uniquely distorted audio files to get their message across they are definitely feeling cornered.
insert free advert for Sophus .. (Score:2)
Anyone who responds to such scams is obviously too dumb to be allowed possession of money, it's best to have them taken out of the economy
"These are not attacking any kind of vulnerability in the computer"
"They are attacking the vulnerability of people's brains [gss.co.uk] " [Graham Cluley - Sophos] May 2004
please invest in my diamond mine .. (Score:2)
"We put it on a garage grinder and the thing won't scratch, so what can it be?"
"The huge stone, which was believed to be the world's largest diamond, is a fake
Like why don't he hand it over to De beers and have them test it, before calling for 'investors' in his diamond mine, wher
luckily, I use Ubuntu (Score:2)
See, you can work Ubuntu into ANY comment. Try it, it's fun.
Re:Only way I'll listen to these... (Score:4, Funny)