Gift card SMS spam drops after FTC action, Cloudmark finds

Antispam vendor Cloudmark found that the FTC action against gift card spammers may have spooked them

The volume of mobile spam messages touting free gift cards sharply fell after the U.S. Federal Trade Commission (FTC) filed complaints in early March against eight companies, according to antispam vendor Cloudmark.

The fraudulent messages told users they could get a free gift card for retailers such as Best Buy, Walmart and Target in exchange for people's personal information. The messages are illegal under US law.

The FTC filed eight complaints in various U.S. courts against 29 defendants, accusing them of sending upwards of 180 million messages that confused consumers and often asked them to pay in order to receive the gift cards.

Gift card spam comprised more than 50 percent of all mobile spam messages in the U.S. around Feb. 18, according to Cloudmark's report, which covers the first three months of this year. It sharply dropped to less than 10 percent following the FTC's March 7 announcement.

Those named in the spam investigation are likely "out of the spam business now," said Andrew Conway, research analyst for Cloudmark.

Gift card spam still took the top spot for the most prevalent type of SMS spam for the first quarter of the year due to high volumes in January and February, Cloudmark said. The second most frequent type was payday loan scams, followed by bogus job listings, adult content and bank account phishing schemes.

Cloudmark, which also provides antispam products to ISPs, named in its report two companies that appear to be favored by spammers: a domain registrar called Internet.bs and Panamaserver.com, a hosting service.

Internet.bs had provided domain registration services for rogue internet pharmacies but recently curbed that practice, according to LegitScript, which offers a service that verifies the legitimacy of particular online pharmacies.

Cloudmark wrote that domains registered by Internet.bs were used for command-and-control servers that were part of the SpamSoldier botnet. The SpamSoldier malware targeted Android phones, masquerading itself as a legitimate game.

Internet.bs, which has country-code top level domain belonging to the Bahamas, is owned by two Panamanian residents, which complicates legal efforts to get the domains shut down.

"Internet.bs does a lot of very dubious domain registrations," Conway said. "But to shut one down, you have to serve legal papers for a Bahamian corporation for people in Panama. That's not tenable."

Cloudmark has flagged as suspicious about 80 percent of the IP space belonging to Panamaserver.com, which allows people to pay for hosting services with a higher degree of privacy using payment services such as Web Money or Liberty reserve, Conway said. Cloudmark's customers can decide whether they want to actually block content coming from those flagged IP addresses.

The email spam seen originating from its IP block targets people in Brazil. Conway said there is no antispam law in Brazil, but Cloudmark does flag the messages as suspect.

In the last two months, Cloudmark saw a major spam run from Romania using IPv6, an Internet specification that dramatically expands the number of IP addresses. But the problem is that IPv6 addresses are so plentiful that blocking an individual address has little effect on spam.

Conway said it's better for antispam products to throttle the number of messages that can be received from a block of IPv6 addresses. Cloudmark already flags 3.3 million of Romania's 14 million IPv4 addresses as having a reputation for spam, Conway said.

As it becomes more difficult to send spam from Romania, Conway said there are signs spammers may be using IP addresses in Belarus. "Spammers will follow the line of least resistance," he said.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags mobileantispamCloudmarkUS Federal Trade Commission

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Father’s Day Gift Guide

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?