Computerworld
E-mail harvesters hit with $1B antispam lawsuit
The lawsuit was filed on behalf of Project Honey Pot
Jaikumar Vijayan  27 April, 2007 08:09

A US$1 billion lawsuit filed Thursday promises to open up a new front in the battle against spam: It targets not just spammers, but -- for the first time -- also those responsible for harvesting e-mail addresses on behalf of spammers.

The lawsuit, filed in the U.S. District Court in Alexandria, Virginia., is one of the largest of its kind and is being filed on behalf of Project Honey Pot members in over 100 countries. Project Honey Pot is a service provided by Park City-Utah based antispam company Unspam Technologies.

"If you've harvested e-mail addresses or sent spam in the last two years, chances are you're on our radar screen and we're coming after you," a note posted on the Project Honey Pot Web site said Thursday.

"This lawsuit is unique because we believe it is the first major case in the United States to bring a claim against spammers for harvesting e-mail addresses," the note said. "While this practice has been a penalty enhancement under the CAN-SPAM Act since it was passed, in most cases the data was not available in order to prove an address was harvested."

The case is being handled by Jon Praed, a founding partner of the Washington D.C-based Internet Law Group, which has represented and won antispam lawsuits for clients such as Verizon Online and AOL in the past.

Project Honey Pot bills itself as a system for identifying spammers and the so-called spambots used by e-mail harvesters to scrape addresses from Web sites. Web site owners can install honey pot software on their sites that allows them to identify spam, as well as when the e-mail was sent to was harvested by the spammer -- and the IP address of the harvester.

The defendants in the case are the "John Does" responsible for e-mail harvesting and spamming, Praed said. "Spammers are very good at hiding themselves. But what they can't hide are the data points that they use [for spamming]. We have got a lot of those data points."

Among the terabytes of data Project Honey Point has collected are more than 6 million spam e-mails, 2.5 million IP addresses from which spam was sent and about 15,000 IP addresses belonging to e-mail harvesters.

The data will allow the plaintiffs to ask the court to subpoena ISPs for the identities of the owners of some of these IP addresses, Praed said. "We are going after the largest targets. The discovery will focus on the big fish. Some of these guys have made a big mistake. They have failed to use anonymity. If you are going to commit an Internet crime everything has to be anonymous."

Often in antispam litigation the biggest stumbling block is establishing the identity of the spammer, Praed said. "What they are engaged in is such inappropriate behavior they usually can't defend themselves to anyone," once they are identified.

Unlike many other antispam initiatives, Project Honey Pot does a good job of gathering evidence against e-mail harvesters that will probably stand up in a court of law, said John Levine chairman of the Internet Anti-Spam Research group. "They have an enormous database where they have evidence of those who collected e-mail addresses for spamming. Although spam comes from different places, in reality there are only a few who harvest addresses for spammers."

Going after such harvesters is a good tactic, he said. "The more expensive and risky we can make it for them the less spam" there will be.

The fact that Praed is representing the case is also a good sign, Levine said. "This looks like a good case. He wouldn't take this if he didn't think he could win."

The lawsuit is part of a week-long series of announcements from Project Honey Pot. On Monday, it announced new honey pot software called QuickLinks designed to help bloggers using services such as Typepad and Blogger -- as well as anyone owning hosted Web sites -- to track e-mail harvesters and spambots. On Tuesday, it announced a new service for tracking "comment spammers" who leave comments containing links to Web sites on blog postings and wikis.

On Monday, Project Honey Pot announced a new service that will allow those using its service to create black lists to automatically block comment spammers and harvesters from accessing their site.

Computerworld Buyer's Guide - Vendors Matched to this Article
More about AOL, Billion, ACT, Verizon

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Newsletter Subscription
Sign up for our Computerworld newsletters!
Syndicate content Syndicate content
 

Computerworld Webinar

Thursday, June 11th, 2009
10:30am EST (Sydney, Australia)
Screening at your PC

Computerworld is hosting a 30 minute live webinar to help you to learn how unified communications can save you money, foster innovation and business agility by making it easier for people to find, reach and collaborate with one another.

Register Now

Computerworld Community Comments
Whitepaper

Reducing the risk of insider abuse

The potential for insider abuse can never be eliminated completely, but the steps outlined in this white paper can reduce the potential for such abuse. Read on to ensure no one person can alter your operations to their personal advantage or to the detriment of your organisation.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links
 
Send Us E-mail | Privacy Policy
Features List | Media Kit | Advertising | Contact Us

Copyright 2009 IDG Communications. ABN 14 001 592 650. All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.