Darkmail traffic risen fourfold in 12 months, says Email Systems
September 07, 2005
Bandwidth-clogging, speculatively targeted spam increases dramatically.
Email management specialist Email Systems has noted a massive 400% rise in Darkmail – speculatively targeted, unsolicited mail which is never retrieved or received by a user – over the last twelve months since August 2004.
Although it is a relatively new phenomenon, Darkmail has risen in prominence recently with a significant increase in the frequency of email attacks that target a specific domain, such as distributed denial of service attacks (DDoS) and directory harvest (DHA) attacks for example, as many of the mails sent are never recieved yet have the potential to sap a huge percentage of network bandwidth.
Typically, a Directory Harvest attack will target a specific domain with emails to many millions of combinations of email address at that domain, such as: adamsmith@domain.com; adam.smith@domain.com, adam_smith@domain.com, smitha@domain.com etc. Often the domain owner is targeted either for malicious reasons specific to that organisation, or because the business type of the domain owner is incorrectly identified by the attacker.
One Email Systems client in the manufacturing sector with fewer than 10 employees was recently targeted with more than ten million emails in a single day, each of which were sent to different email addresses at that domain. The most likely explanation for this Directory Harvest attack was that attacker incorrectly believed the target domain to belong to an ISP.
Neil Hammerton, CEO of Email Systems commented:
"Our statistics show that over the last twelve months, spam attackers are becoming increasingly speculative in their approach to reaching an actual user, with the overall volume of unsolicited mails having increased significantly and, more worryingly, the amount that's mis-targeted having increased by a different order of magnitude altogether. Unfortunately this is resulting in a great deal more unnecessary email traffic which has the potential to severely affect unprotected corporate networks."
RELATED STORY:
DARK TRAFFIC -- the hidden email threat