Spam Protection

How Does a Spam Blocker Work?

2008-02-02T12:36:00.000-08:00

A spam blocker is one way you can effectively cope with the deluge of spam that is targeted at your inbox each day. This type of anti-spam software works by blocking any unsolicited email from getting to your inbox. It is generally about 90% effective in blocking this spam, along with any viruses and other malicious code that may come with it.

The spam blocker differs from a spam filter in that its function is specifically to block most of the incoming spam. The spam filter works by organizing email that it identifies as spam into folders, and leaves it to you to take further action on. The spam blocker, on the other hand, is specifically programmed to prevent spam from getting through. With a spam blocker, you do not have to deal with the spam it detects and blocks.

So How Does a Spam Blocker Work?

The spam blocker will log into your mail server email account every 10 minutes, inspecting it for spam email. It immediately destroys any viruses, and gets rid of any obvious spam such as email that contains adult or pornographic material. Undesirable email is flagged and then redirected to a folder specifically for spam. You will have an opportunity to sort through this spam folder to verify that no legitimate email is mistakenly diverted there. Any email that it is on your white-list or which it determines as legit will be left on the server to be downloaded as normal.

If an email is from an unknown source and the spam blocker cannot clearly categorize it as either legitimate or spam, it is quarantined in a specific folder until you either move it or delete it. The quarantined spam is usually held in this folder for up to 30 days, or until you take action on it. The spam blocker keeps track of the particular action you take on each quarantined email e.g. if you delete the email. It will "remember" this action and use it to create a new filtering rule that it will apply to future incoming email.

What are the Benefits of a Spam Blocker?

- A spam blocker frees up storage space. Most mailboxes have a very limited capacity to store email. Spam takes up space, and a spam blocker generally prevents large files from making it into your main folder.

- By blocking spam rather than just filtering it, the spam blocker helps minimize the amount of time you have to personally sort through your spam email.

- Because this anti-spam software deletes spam, it drastically lowers the risk of a computer virus infecting your system.

- Many spam blockers are available online for immediate download, are usually very easy to install and generally do not require further configuration..

Many email services offer spam blocker software. If, however, you choose to buy your own, make sure you get one that is compatible with your service. Also take into account the level of blockage it offers as well as flexibility it offers in letting you customize the settings to your own preferences.

Phishing-101

2008-02-02T12:34:00.000-08:00

Phishing is an email spam scam that is specifically used to commit identity theft. Its sole purpose is to scam you into divulging personal information, which they can use to perpetrate identity theft. This includes passwords, card numbers, birth dates, PINs and other vital personal data. The term came into use to denote the way phishers bait to lure their victims into divulging private data. Industry experts define this devious practice as a form of "social engineering."

Typically, a phishing attack will be executed in combination with a massive spam mailing. Phishing spam is sent out to millions of recipients, often with a subject line that is exciting or upsetting. It is calculated to trigger an immediate reaction from the recipient, and get them to respond without further thought.

The phishing email will often have phrases such as:

-Dear Valued Customer.
-Click the link below to access to your account.
-If you don't respond within 24 hours, your account shall be closed.

The phishing spam is typically a fraudulent but very official-looking e-mail. It is cleverly designed to replicate the website and email messages of a business you know and trust such as your bank or mortgage company. The email will even sport official logos and graphics of the legitimate company.

It will instruct you to click on a link in the email to go to the company's website, where you can "update" your personal information. The link will usually be "masked," which means that when you click on it, it will take you to a phony web address. Clicking on the link will take you to a website that appears to be that of the real financial institution's website. It is, however, just a copycat spoof, set up to give the spammer access to your personal and financial data. You may give your information thinking you are at the real website. Instead, any information you enter here will go directly to the identity thieves.

What are the Consequences?

If you fall prey to the scam and unwittingly divulge private information, you will be left vulnerable to identity theft, credit card fraud and other financial mishaps.

These identity thieves will either sell the information to fellow criminals, or use it for their own financial gain. This vital personal data will be used, for example, to set up fraudulent online bill pay, with payments made out to the phisher. They may use it to access funds from your bank accounts and credit cards and transfer them to their own checking accounts. They may even use a copy of your bank or credit card along with the phished PIN to withdraw cash from your accounts at any ATM.

Phishing is a numbers game for these criminal spammers. They will send out their phishing email to millions of recipients. They count on just a few falling for the scam and volunteering their information: if a mere 1% of recipients volunteer their personal information, the phishing expedition will be a hughly lucrative. It is these few who make their scam worthwhile.

Anti-phishing Software

2008-02-02T12:31:00.000-08:00

The threats posed by spam are always evolving, and phishing is one of the most recent scams the spammers have come up with.
Your most important protection against phishing is vigilance and a healthy skepticism. You can, however, supplement this with Anti-phishing software programs

Anti-phishing software works by detecting phishing content that may be contained in an email. It is genrallly used in conjunction with your email service as a toolbar. This tool bar will display the real name of any website you visit, and expose any spoofed websites that phishers may attempt to use.

This software is offers a second line of defense to for blocking phishing attacks and sites that might have foiled and bypassed by your browser's built-in protection. Here are a few of them:

Earthlink Toolbar Scamblocker
Offers a check towards a phishing blacklist of sites
Checks the owner and location of the web site
Prevention against phishing and pop ups

Earthlink offers a free browser toolbar that includes ScamBlocker, an application that protects you against phishing scams and phishing pop ups. It will, for example, warn you when you attempt to connect to a website that is on Earthlink's balcklist of fraudulent sites. It will analie each web page hat you visit and display a security rating of the webpage on its toolbar.

Earthlink's Scamblocker can be downloaded at this link:
http://www.earthlink.net/software/free/toolbar/

Netcraft Anti-phishing Toolbar
When a one recipient of a phishing email reports it, the relevant URL is blocked for the rest of the Netcraft community members.

It will display for you the website's hosting location, which will help expose fraudulent urls. Say, for example, you are on the bankofamerica.com website, the hosting location is unlikely to be in Poland.
The toolbar will also detect any web addresses that contain letters or characters that are only used in the URL to deceive.

The Netcraft Anti-phishing Toolbar can be downloaded at this link:
http://toolbar.netcraft.com/

TrustWatch Toolbar
This free toolbar is also designed to protect against phishing, identity theft and internet fraud. It does real-time checks to let you know if a web site you are visiting has been verified by a legitimate third party organization, and if it is therefore safe to transmit your confidential personal information. It is the internet equivalent of a credit check.

The TrustWatch Toolbar can be downloaded at this link:
http://toolbar.trustwatch.com/

Stopzilla Anti-Spyware 5.0
STOPzilla works by detwecting and blocking Phishing Attacks, Popup Ads, Spyware, Adware and other malicious applications. It also provides hijack protection.

Stopzilla can be downloaded at this link:
http://www.stopzilla.com/

Spybot - Search and Destroy
This is a free Anti-Spyware application. An important feature of this application is that it will Write-protect your computer's HOSTS file, which is a primary target of phishers'spyware.

Spybot can be downloaded at this link:
http://www.safer-networking.org

Webroot's Phish net
Phish Net employs a dynamic blacklist to protect against phishing. The application stores your personal data such as credit card numbers, social security numbers, etc. When you visit a site and attempt to enter this information, a pop-up will alert you that it is not on your list of trusted sites, and will expose any redirects that the may be involved in the transmission of your data. It will also verify that the site has an encrypted connection before it transmits the data.

Webroot's Phish net can be downloaded at this link:
http://www.webroot.com/consumer/products/

Understanding Spam

2008-02-02T12:27:00.000-08:00

Anyone who has an email address needs no introduction to this pesky phenomenon of electronic communication. Spam is unwanted, unsolicited commercial email that is mailed in bulk to thousands, even millions of recipients simultaneously.

Much of the confusion regarding spam comes from a lack of understanding the everyday email user may have regarding the ways and motivations of the spammers.

Whether a given email is spam or not spam can be said to be in the eye of the beholder. There are legitimate email marketers out there, who comply with all applicable laws when they do their bulk emailing. They will, for example, only send their advertising to recipients who have subscribed to their emailing list. In fact, in formal studies have shown that currently, only about half of all spam is deceptive or fraudulent; roughly half of all spam contains genuine marketing messages. Thanks to spammers, all email marketing is tainted with a bad name.

The nature of spam has less to do with its commercial content than with the fact that it is unsolicited and sent out in bulk. There are two categories of spam: unsolicited bulk email and unsolicited commercial email.

Unsolicited bulk email is mass-mailed to recipients who have not given their consent to receive it. This category of spam encompasses jokes, chain letters, virus alerts, etc. unsolicited commercial email targets your wallet. This subset of spam includes get-rich- quick and pyramid schemes, stock offerings for pennystocks, spamming software and fake pharmaceuticals.

While most spam is generally mailed out to advertise a product or service, some is malicious in content and intent. It runs the gamut from jokes and ads, to stock-market scams and virus-laden emails. Spammers, those obnoxious folks who send you spam, will target you because:

- They want you to buy something

- They defraud you out of your hard-earned money

- They want to confirm that your email address is a real live one (and then add you to a spam mailing list)

- They just want to shock and offend

The huge volume of spam has created big problems. While it is free for the spammer to send out his millions of spam emails, the cost of the bandwidth that this junk mail takes up borne by the internet service provider (ISP). The ISP, not one to bear this expensive burden on its own, will pass on some of the cost to you in the form of price increases.
You also pay the price for spam in the time wasted sorting through and deleting junk mail, the loss in productivity and the pure aggravation of having to deal with it. It also raises security issues because it may contain viruses that are harmful to your computer.

How do you spot spam when it lands in your inbox?

Here are a few things you can look for that are a dead give-away

- Email from someone you do not know
- Nonsensical subject lines
- Outlandish promises of money, exotic cruises and lonely housewives
- Adult or pornographic content
- Unsubscribe links in unsolicited email
- Very brief emails - a line or two

You should be aware that spammers often send you email that is designed to look like it came from an acquaintance of yours, a reputable company or a reply to an email from you.

A Brief History of Spam

2008-02-02T12:25:00.000-08:00

In the early days of the Internet, spammers primarily targeted newsgroups on USENET, the online conferencing system. These are newsgroups that are organized as forums to discuss particular topics. As electronic messaging systems advanced, it made possible the practice of crossposting - posting the exact same message to multiple newsgroups and other online forums.

Spammers were quick to adopt crossposting as a tool of their trade. Now, they could send the same electronic message to thousands of newsgroup members at the one time. Not only could they target a larger audience with one posting, but they also did not have to differentiate between the interests and focus of the individual forums that they targeted. What's more it cost them next to nothing to spam these newsgroups.

As email became an increasingly widespread mode of communication, the spammers shifted their focus the massive audience that it made available to them. Mass emailing software soon became another essential tool of their trade, as they begun to use this application to send junk email to thousands upon thousands of unwilling recipients.

The spam industry also adapted the available Internet technology to create the "spambot". A spambot is an automated program that will rove the Internet, "harvesting" email addresses from newsgroup postings and from other websites. It literally gathers thousands of email addresses in a single hour. These are compiled into bulk mailing lists with which the spammers can thousands of victims at a time.

The practice of sending out unsolicited, unwanted junk email and junk postings came to be called "spam." The term is commonly believed to have been derived from a British comedy skit by Monty Python, in which a restaurant serves each meal with a side of spam. As a waitress emphasizes to a couple the availability of spam with every dish, a group of Viking patrons break out in song, singing "SPAM, SPAM, SPAM... lovely SPAM! wonderful SPAM!" in a loud chorus. In the 80's, the term was adopted to refer to the junk emails and postings, and the name stuck.

The earliest, most widely known incident of commercial spamming dates back to 1994. It involved two lawyers who spammed USENET to advertise their services as immigration lawyers. They later expanded their marketing efforts to include email spam. The incident is commonly referred to as the "Green Card Spam."

This nefarious industry has since grown in leaps and bounds. Today, more than half of the trillion-plus emails that are sent and received are spam. Initially, spam was generally advertising-related email. In more recent years, however, a particularly nasty crop of spammers has emerged, who send out their spam with nothing less than malicious and/or criminal intent. Some send out spam that contains viruses or malicious code. Others devise scams intended to defraud you of your money. And then there are those whose focus is identity theft.

Benign or malicious, commercial or criminal - spam has transformed the way we communicate electronically, and will continue to do so well into the near future and very likely beyond. Spam has become a regular, albeit unwanted, fact of online life.