Spammers still defeating CAPTCHAS
Spam at Gmail doubled in past month, security vendor says
IDG News Service - Spam originating from Google Inc.'s Gmail domain doubled last month, indicating that spammers are still defeating the CAPTCHA, the distorted text used as a security test to thwart mass registration of e-mail accounts and other Web site abuse.
Gmail spam went from 1.3% of all spam e-mail to 2.6% in February, according to data released today by e-mail security vendor MessageLabs Ltd.
The new statistics are another nail in the coffin for CAPTCHA, which stands for Completely Automated Public Turing Test to Tell Computers and Humans Apart.
Google is the latest free Web mail provider to fall victim to spammers who create software to determine the codes or sometimes employ people to solve the codes en masse.
"It's only a matter of time before [CAPTCHAs] are comprehensively defeated," said Paul Wood, a senior analyst at MessageLabs.
Last month, security vendor Websense Inc. ascertained that spammers were using two hosts to crack Gmail's CAPTCHAs. The method appeared to be successful only 20% of the time. But if the procedure is repeated thousands of times, many new accounts can be generated and used to send spam.
Most of the messages use links and images to advertise adult entertainment sites, Wood said.
While other spam domains can simply be blocked by antispam software, businesses are reluctant to cut off the domains of free Web mail providers because of their legitimate use, he said. Spam from Web mail providers accounts for 4.2% of all spam.
Google's CAPTCHA system is considered hard to crack, but so was Yahoo Inc.'s, which is also regularly beaten. MessageLabs said 88.7% of the spam from free Web mail providers comes from Yahoo's domains.
Microsoft Corp.'s CAPTCHA, used for registering accounts on its Windows Live Mail service, has also been cracked. Websense believes that the same group of spammers are responsible for breaking both Google's and Microsoft's systems.
Wood said MessageLabs provides Google and other companies with data that helps fight spam. Google could not be reached for comment.
MessageLabs sells a security service that filters e-mail before passing it to its 17,000 corporate customers. The vendor snags 2.5 billion spam messages per day from a total of more than 3 billion messages.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- What Datapipe customers need to know about the new PCI DSS 3.0 compliance standard This handy quick reference outlines what PCI DSS 3.0 is, who needs to be compliant and how Alert Logic solutions address the new...
- Defense Throughout the Vulnerability Life Cycle This whitepaper provides insight into how to leverage threat and log management technologies to protect your IT assets throughout their vulnerability life cycle.
- The Critical Role of Support in Your Enterprise Mobility Management Strategy Most business leaders underestimate the importance of tech support when they choose an EMM solution. Here's what to put on your checklist.
- Separating Work and Personal at the Platform Level: How BlackBerry Balance Works BlackBerry® Balance™ separates work from personal on the same mobile device, right at a platform level. Find out how it can work for...
- Live Webcast Best Practices for the Hyperconverged Enterprise Network To the Age of Constant Connectivity and Information overload
- Getting Ready for BlackBerry Enterprise Service 10.2 Find out how BlackBerry® Enterprise Service 10 helps organizations address the full spectrum of EMM challenges, while balancing the needs of both the...
- Containerization Options: How to Choose the Best DLP Solution for Your Organization This webcast outlines a framework for making the right choice when it comes to containerization approaches, along with the pros and cons of... All Networking White Papers | Webcasts