Mega-botnet Rustock stops spamming
Rustock, the once dominant spam botnet, seems to have been taken out of contention.


One of the biggest spamming botnets of all time appears to have stopped spewing out messages, yet no clear explanation has been given as to why.
The Rustock botnet, which was pushing out 47.5 per cent of all spam by the end of 2010, stopped spamming yesterday afternoon around 3pm GMT.
Initial reports emerged on the KrebsonSecurity blog, and both Symantec and M86 Security have confirmed Rustock's decline in spam output.
"It is unclear yet who or what caused the shutdown. It's also possible it has been abandoned," said Phil Hay, lead security researcher with M86, on a blog.
"Whatever the reason, let's hope this one sticks. Previous attempts at botnet shutdowns have tended to be short lived as the botnet herders simply regroup and start again. It's too early to say bye bye Rustock, but the thought is certainly nice."
Rustock output was hit last year when Spammit.com, a partner programme responsible for significant amounts of pharmaceutical spam, was shut down.
Since then other botnets emerged as equally prominent spammers.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"This increase from other botnets means that so far, the takedown of Rustock hasn't had much noticeable effect on the overall amount of spam tracked by MessageLabs Intelligence," said Paul Wood, MessageLabs Intelligence senior analyst at Symantec Hosted Services, on a blog.
"Rustock has gone quiet before, over the last holiday season it stopped spamming for several days but came back as strong as ever. Only time will tell if this will happen again."
Overall spam rose in February, according to data from Symantec, following a lull in activity in the latter half of 2010 and the start of 2011.
Average daily spam volume increased 8.7 per cent in February month-over-month, as spam made up 80.65 per cent of all messages, compared with 79.55 per cent in January.
Phishing spike
Meanwhile, there was a significant spike in phishing last month, with an increase of nearly 40 per cent as hackers jumped on automated tools to help them dupe web users, Symantec said.
Phishing websites created by automated toolkits went up by around 50.33 per cent when compared to January, whilst phishing sites with unique URLs increased by 33.73 per cent.
Little changed from the UK perspective, as four per cent of all phishing attacks emanated from the country the same figure as in January.
There was a notable change in the US though, as phishing attacks originating from the country fell by 10 per cent. The nation still remained the worst offender, however, with a 52 per cent share.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Asus ZenScreen Fold OLED MQ17QH review
Reviews A stunning foldable 17.3in OLED display – but it's too expensive to be anything more than a thrilling tech demo
By Sasha Muller
-
How the UK MoJ achieved secure networks for prisons and offices with Palo Alto Networks
Case study Adopting zero trust is a necessity when your own users are trying to launch cyber attacks
By Rory Bathgate
-
Malicious WordPress plugin installed backdoor on thousands of websites
News Widget plugin spewed spam to unsuspecting victims
By Rene Millman
-
Power stations under attack from long-running hacking campaign
News Dragonfly threat group is ramping up activities, say researchers
By Adam Shepherd
-
711 million data records revealed in spambot dump
News The data contains email addresses, passwords and server information too
By Zach Marzouk
-
Symantec profits surge as firms prop up their cyber defences
News The company also announced plans to sell its web certificate business
By Dale Walker
-
Security experts uncover Tinder porn site spam scheme
News Chatbots use verification offers to lure in victims
By Adam Shepherd
-
Symantec to pay $4.65 billion to acquire Blue Coat
News Greg Clark to become Symantec CEO, promising new cloud security
By Aaron Lee
-
Spammers selling fake tickets for Rio Olympics 2016
News Fraudsters have created fake ticketing websites to trick users
By Adam Shepherd
-
Symantec ditches reseller guilty of scamming PC users
News Silurian told people they had malware, then sold them Norton Antivirus for $249
By Joe Curtis