NWA-PCUG Newsletter Article, April 2004
Computer Viruses and Spam Ruled in 2003 – Be Prepared!
by Ira Wilsker, APCUG
(click to email author)

The final statistics on spam emails and viruses have been released by several organizations and companies, and it was not a good year for computer users who had to deal with them. Through awareness of what happened last year, we may be better prepared to deal with what we may encounter in 2004.

Even though President Bush signed the “Can Spam” act, and it recently went into effect, the spam tracking companies have found no decrease in the amount of spam emails being sent, and in fact there are indications that it is still increasing at a rapid rate. According to the e-mail filtering service Brightmail (http://www.brightmail.com), the percentage of all emails in December, 2003, that were spam was 58%, compared to the January 2003 rate of 42%, a substantial increase. Of the spam filtered in December, Brightmail determined that 21% was for products advertising general goods and services, 18% was financially oriented, 18% was adult oriented, 9% was for outright scams, 6% each for health, leisure, or internet related, 3% was spiritual or religiously oriented, and 3% were for clear frauds.

The marketing research and information company Synovate (http://www.synovate.com) found that the average American received an average of 155 spam emails per week, for each email account used. One out of five Americans received over 200 spams per week, in each account. Statistically, men receive more spam than women each week, 164 compared to 147, and there is no major difference in the rate of spam based on age ranges. Geographically, people living in the northeast received the fewest spam emails at 131 per week, while those of us living in the south received the most at 163. While many computer security experts have stated that the best way to fight spam is to simply delete it, 11% acknowledged having a transaction initiated by a spam mail.

The commercial spam filtering company Commtouch (http://www.commtouch.com) reported that the single most common subject used by spammers was “Viagra”, or a substitute for Viagra. In order to attempt to slip by the spam filters commonly used, the spammers uses over 50 variations of the spelling of Viagra, according to Commtouch. They also reported that 28% of all spam contained some form of trickery in the subject line in order to penetrate the spam filters, and be delivered to the recipient.

Far more destructive than spam mail was the proliferation of computer viruses, worms, Trojans, and spyware. According to the antivirus software company Panda (http://www.pandasoftware.com), over 3700 new viruses and worms, including variants, appeared in 2003, which was about a third more than appeared in 2002. Documented and projected damage from these digital vandals was enormous. The British security company “mi2g” (http://www.mi2g.com) calculated that the most damaging viruses and their variants of 2003, in terms of dollars of damage around the world, were Sobig ($36.7 billion), Klez ($19.4 billion), Yaha ($11.3 billion), Mimail ($10.5 billion – and still very active in 2004), and Swen ($10 billion).

Mi2g also saw, “a meteoric rise in electronic crime: business interruption, financial fraud, "phishing" scams, extortion demands post distributed denial of service attacks, espionage and mass spam campaigns.” They attribute much of this increase to global criminal syndicates, and extremist group activities, the 2003 rate being several times more than in 2002. According to “mi2g”, the most frequent victims were home users, and small to medium businesses. Users of broadband internet access were more frequent targets than dialup users. There also was a dramatic increase in “pfishing” and other elaborate scams to ensnare victims into disclosing sensitive personal and financial information through fraudulent email and websites appearing to be authentic banking, retail, or other commercial websites. Many customers of major banks, retailers, credit card companies, and online services were duped into providing their information to thieves who used that information to conduct financial transactions, steal their identities, hijack their internet access for nefarious purposes, or commit other criminal activities.

Mi2g also predicts that 2004 will see a worsening of cyber problems, with the rate of spam increasing to 66% of all email (despite recent US and European laws designed to restrict the practice), spam costing the world economy $60 billion in lost productivity and other costs. Mi2g also predict that there will be a greater merging of spam, viruses, worms, and Trojans in 2004, where personal computers hijacked by viruses and worms will be used to generate spam at far higher numbers than in 2003, or attack other computers. Where virus writers used to be vandals seeking notoriety, 2004 will see a dramatic increase of viruses and worms created for financial gain, identity theft, or infrastructure attack, with some of the most dangerous being politically motivated. It is predicted that while much of the politically motivated “hactivism” will originate in Moslem countries, with unofficial reprisals from American, British, Indian, and Israeli hackers. “Pfishing”, the attempt to steal sensitive personal information by tricking the victim into thinking that he is responding to a legitimate request from his credit card company, bank, or retailer with which he has a relationship, is expected to continue to increase, resulting in a continued loss of confidence in our established institutions.

Our personal risks can be reduced by using common sense, deleting all spam and other questionable emails without opening them, using updated antivirus, firewall, and anti-spyware software, and never disclosing personal information without verifying the necessity and destination of that information.

As the gruff sergeant on the “Hill Street Blues” said at the end of every roll call, “Be careful out there!”

Ira Wilsker is the Advisor for Region 8, APCUG Representative & Bylaws Chair for the Golden Triangle PC Club, a columnist for The Examiner in Beaumont, Texas, and has two radio shows. He also graciously shares his articles with the APCUG editors. There is no restriction against any non-profit group using this article as long as it is kept in context with proper credit given the author. The Editorial Committee of the Association of Personal Computer User Groups (APCUG), an international organization of which this group is a member, brings this article to you.

Click here to return to top