Spam originating from Google's Gmail domain doubled last month, indicating that spammers are still defeating the CAPTCHA, the distorted text used as a security test to thwart mass registration of e-mail accounts and other Web site abuse.
Gmail spam went from 1.3 per cent of all spam e-mail to 2.6 per cent in February, according to data released by e-mail security vendor MessageLabs on Monday.
The new statistics are another nail in the coffin for CAPTCHA, which stands for Completely Automated Public Turing test to tell Computers and Humans Apart.
Google is the latest free Web mail provider to be victimized by spammers' efforts to create software to solve the codes, or at times, also employ people to solve the codes en masse.
"It's only a matter of time before [CAPTCHAs] are comprehensively defeated," said Paul Wood, senior analyst at MessageLabs.
Last month, security vendor Websense ascertained that spammers were using two hosts to crack Gmail's CAPTCHAs. The method appeared to be successful only 20 per cent of the time. But if the procedure is repeated thousands of times, many new accounts can be generated and used to send spam.
Most of the messages use links and images to advertise adult entertainment sites, Wood said.
While other spammy domains can simply be blocked by antispam software, businesses are reluctant to cut off the domains of free Web mail providers because of their legitimate use, he said. Spam from Web mail providers comprises 4.2 per cent of all spam.
Google's CAPTCHA system is considered hard to crack, but so was Yahoo's, which is also regularly beaten. MessageLabs said 88.7 per cent of the spam from free Web mail providers comes from Yahoo's domains.
Microsoft's CAPTCHA, used for registering accounts on its Windows Live Mail service, has also been cracked. Websense believes the same group of spammers are responsible for breaking both Google and Microsoft's system.
Wood said MessageLabs provides Google as well as other companies with data that helps fight spam. Google could not be reached for comment.
MessageLabs sells a security service to companies, filtering e-mail before passing it to their 17,000 customers. Per day, the company snags 2.5 billion spam messages from a total of more than 3 billion messages.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Achieving the impossible: Unlimited application scalability
Enterprise Wireless WLAN Security
Email Archiving Implementation: Five Costly Mistakes to Avoid
Strategies for Eliminating .PST Files
Security Inside Out
Gaining Competitive Advantage Through Enterprise Planning
Data grids and service-oriented architecture
Refresh your AUP: Top tips to ensure your acceptable use policy is fit for purpose
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Vignette Announces 2008 Excellence Awards 2008-11-21 10:50:00+11
PGP and Ponemon Institute Unveil Inaugural Australian Data Breach Study 2008 2008-11-20 17:34:00+11
Symantec Cloud Services Transform Data Centre Operations Through Proactive Management 2008-11-20 12:06:00+11
Verizon Business Offers Tips to Building a Successful Unified Communications and Collaboration Plan 2008-11-20 12:04:00+11
AARNet Brings 4K Digital Cinema to Australia: First 4K HD Video Signal delivered into Australia by AARNet 2008-11-20 12:02:00+11
Gaining Competitive Advantage Through Enterprise Planning
No matter how good its products or innovative its services, no organization can perform to its full potential without an adequate planning structure in place. Discover how this can be done by reading on.









