Re: Water tight opt-in (yet another FUSSP)

Below:

On 1/12/2014 8:37 AM, Chris Lewis wrote:

> On 01/12/2014 11:01 AM, Paul Ferguson wrote:
>>
>> On 1/11/2014 1:38 PM, Neil Schwartzman wrote:
>>
>>> HISTORICAL
>>> The problem of botnet spam hitting recipient mailboxes has been solved,
>>> or at least remediated to the point that it is pretty much a non-issue.
>>>
>>
>> I'm not sure that is true at all -- there are still successful spambots
>> which are *HIGHLY* successful in getting millions of malicious messages
>> into recipient mailboxes around the world daily.
>>
>> Perhaps I misunderstood your point here?
> 
> At it's peak, Srizbi was pushing 60 billion spams/day by itself.
> Rustock similar.   "Millions per day" is still well under 1%.
> 
> A study performed several years ago demonstrated that ~1% of botnet spew
> was getting thru to end users.
> 
> Attached is spambot flow over the past 5 years.
> 
> Instead of 10+ botnets spewing massive volumes, there's only one or two
> significant botnets left (Kelihos & Cutwail).
> 
> What spambots are you talking about?

Well, Kelihos & Cutwail, of course. :-)

So, taken in that context, I see Neil's point. I am not familiar with
the trending data over time regarding delivery... messaging abuse is not
really my area of expertise here, just commenting on what I do see, and
that is still a lot of daily malicious spam delivery via Cutwail and
Kelihos.

- ferg


> 
> Have we won the war against windoze botnets yet?  No.  But botnet spam
> getting thru to the end-user is a minor issue these days.  Compromised
> web servers and user accounts are the thing nowadays.
> 
> If botnet spew is still a big factor in your inbox, you need a better
> spam filter.
> 
> 
> 
> -
> This is the asrg mailing list.  To change your subscription settings, see
> http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org
> 


-- 
Paul Ferguson
PGP Public Key ID: 0x54DC85B2

-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org