|Google Updates Q1 2010 Spam and Virus Trend Data|
Google Postini Services team
Google Updates Q1 2010 Spam and Virus Trend Data [googleenterprise.blogspot.com]
In 2009, the security community started seeing diminishing returns from the takedown of malicious ISPs. After the ISP 3FN was taken down, spam levels rebounded in less than a month, and after Real Host went down, spam volumes recovered after only two days. In response, the anti-spam community turned its attention toward taking botnets offline instead.
Toward the end of 2009, Mega-D, a top-10 botnet – responsible for infecting more than 250,000 computers worldwide – was severely crippled through a carefully orchestrated campaign designed to isolate the command-and-control servers spammers were using to support the botnet. In early 2010, security professionals, along with government agencies, successfully mounted a campaign against several more targets: major botnets such as Waledac, Mariposa, and Zeus were either shut down or had their operations significantly curtailed.
However, this recent spate of botnet takedowns has not had a dramatic impact on spam levels. Although spam and virus levels did fall below Q4’09 highs, reports from Google’s global analytics show that spam levels held relatively steady over the course of Q1’10.
This is worth a read, however, note the plug for cloud-based services at the end.
its google, of course they plug the cloud.
But the spammers are using the cloud to send spam.
google isn't safe either, people register massive amounts of gmail accounts totally automated in order to send spam cause they know if it comes from gmail its going to hit the inbox.
spammers suck but the only way to make it go away is for it to not be effective anymore, by the end user being able to spot spam and ignore it.
If you want to really put a dent in spam emails and you only do business in North America you can block RIPE, APNIC and AFRINIC networks from your servers you will reduce 50% of your email spam. Add to that, your users will be happier because your server will be faster because you will block over 1/2 of the malicious bots eating up bandwidth on your server from those IP ranges.
Problem is there are now hundreds of products that accurately detect spam but nobody is doing anything about the actual sending of spam. You end up married to many pricey programs because if you drop them you’ll end up with boxes throttled by spam. It seems to me spam services are being advertised more than ever because they feel little enforcement is actually going on.