June 9, 2009 9:00 AM PDT

Report: Spam reduced following Pricewert shutdown

by Dong Ngo
  • Font size
  • Print
  • 22 comments

Cutwail's spam activities on Thursday as Pricewert got shut down.

(Credit: MessageLabs)

It's been almost a week since the Federal Trade Commission had the allegedly rogue Pricewert ISP shut down, and it seems like the Internet has indeed been a safer, or I should say slightly less dangerous, place.

The FTC charged that Pricewert's distribution of illegal, malicious, and harmful content and deployment of botnets that compromised thousands of computers caused substantial consumer injury and was an unfair practice, in violation of federal law.

According to Symantec, the Cutwail botnet--one of the most notorious botnets, accounting for up to 35 percent of all spam in May across the globe--experienced a major blow to its track record after the shutdown late Thursday of Internet service provider Pricewert.

Another botnet Pricewert is allegedly involved with is the Pushdo, which was also reportedly affected. Both Pushdo and Cutwail reportedly used 3FN, one of the names Pricewert did business under, as botnet control servers.

According to the data released Monday by TRACElabs, the overall spam volume index has been reduced by 15 percent since Thursday. However the day-by-day number has gradually increased.

This means a couple of things.

First, either the timing of these changes was a coincidence or Pricewert was indeed involved in this nasty business. It's important to note that the company has not yet been convicted of any wrongdoings. The first court hearing is scheduled for June 15.

Second, it's likely that the spammers will soon recover from this heavy blow as many similar companies are based outside of the U.S., where the anti-spam laws are not strictly enforced.

Nonetheless this for now looks like an apparent victory for the authorities and for all the Internet users. In terms of its long-term impact on spam, Symantec's MessageLabs Senior Anti-Spam Technologist Matt Sergeant told CNET News: "For now, we will see spam levels lower than usual, but we expected the swift comeback of Cutwail. The spammers learned that they can't put all their eggs in one basket and need to have backup command and control."

It's indeed wait and see, but so far I personally have received less spam in the last few days. How about you? Share your thoughts about this case and your recent spam experience, in the comment area below.

Dong Ngo is a CNET editor who covers networking and network storage, and writes about anything else he finds interesting. You can also listen to his podcast at insidecnetlabs.cnet.com. E-mail Dong.
Recent posts from Security
Q&A: Researcher Karsten Nohl on mobile eavesdropping
RockYou sued over data breach
Hacker Gonzalez pleads guilty in Heartland breach
Microsoft rebuts IIS vulnerability claims
More attacks expected on Facebook, Twitter in 2010
GSM crypto code cracked, engineer says
Web-based Lookout protects mobile devices, data
Hackers claim to crack Kindle copyright armor
Add a Comment (Log in or register) (22 Comments)
  • prev
  • 1
  • next
by nachurboy June 9, 2009 9:19 AM PDT
Is the ISP "rouge" or beige? I'm not exactly sure what color it is. 2nd website I've found that calls the website a reddish tinted ISP.
Reply to this comment
by SwissJay June 9, 2009 9:23 AM PDT
Just a slight case of dyslexia, swapping 2 letters ;)
by alegr June 9, 2009 9:32 AM PDT
It's turqoise
by Dalkorian June 10, 2009 2:31 PM PDT
It may have been, but now it's black.
by BAMAToNE June 9, 2009 9:41 AM PDT
"... I personally have experienced less spam emails..."

You experienced fewer spam emails, or less spam email, but not less spam emails.
Reply to this comment
by jture June 9, 2009 9:45 AM PDT
That's not the only grammatical slip in Dong's post. "Either this was coincident or ..." No, "coincidental or ..."
"ederal Trade Commission had the allegedly rogue Pricewert ISP shutdown" - no, "shut down."
"Wrong doings" is usually written as one word.
I could go on, but I won't.
by ngodong June 9, 2009 10:50 AM PDT
All fixed. Thank guys. I am glad you guys had some fun at my expense.
by kojacked June 9, 2009 12:42 PM PDT
What's with the editoral trolls of late? Don't people have anything better to do? Who the hell cares if the grammer is pristine or not.
by Been_there_Saw_it_before June 9, 2009 1:19 PM PDT
The people who dismiss grammer as a side issue are the ones who have trouble with the difference between a lightning bug and a lightning bolt. Which one do you want to be near?
by BAMAToNE June 9, 2009 2:10 PM PDT
I consider this copy editing, not trolling, since apparently this is not done internally.
by Hunnter2k3 June 9, 2009 9:58 AM PDT
Still won't do anything in the long run.
These guys will get back on their feet quite easily.

If anything, what they done was the most stupid idea ever, if they never done any "spying" that is.
Now all they will do is move them deeper into the depths of the internets.
Reply to this comment
by Michichael June 9, 2009 11:03 AM PDT
I was wondering why my firewall went from 500 hits a day to 3 on the SMTP port...
Reply to this comment
by Eddie-c June 9, 2009 11:20 AM PDT
How long will it be before it returns to the ridiculously high level it is/was? After all, they shut that other isp down and within a couple of months the spam level went back up!

If machines are infected/compromised, ISPs should block the damn things and only allow them back on when fixed, or offer to have one of their techs fix it .... hey, there's an idea ... hire people, more jobs, educate people ... oh wait, that's like too much common sense.
Reply to this comment
by Michichael June 9, 2009 12:36 PM PDT
Right because they can make a profit fixing stupid people's systems. And do you know how hard it is to fix a system that has no internet access? Or from a household that has no net access? It sucks!
by JoeF2 June 9, 2009 5:59 PM PDT
"And do you know how hard it is to fix a system that has no internet access?"

Reformat the hard drive. Doesn't require Internet access...
And then install anything but Windows. I can put a box with a fresh Linux install on the network without fear of getting infected in 2 minutes.
Oh, and charge it to Microsoft. After all, they are selling a defective product.
Seriously, never connect a Windows box directly to the Net. Put a router/firewall in front of it. And delete the IE icon, and install Firefox or Opera or Safari. That willl take care of a large part of the problem.
by malynj June 9, 2009 12:15 PM PDT
It would have been better to identify which of their hosts were the botnet controllers, and allowed a trusted group to do a managed shutdown of the botnet while known controllers were in custody. This has been done before, not sure why it wasn't done this time.
Reply to this comment
by likeAppnforPhys June 9, 2009 12:41 PM PDT
I know it's SO pedantic to help out with someone's grammar...
Reply to this comment
by xim1970 June 9, 2009 7:00 PM PDT
I know it's a bit "nitpicky" to pick on this post, because he does provide great info, but really, how far is it from journalistic integrity to blogging integrity, where people don't, at least, spellcheck their work? If the 'net is going to replace newspapers, the least we should expect is that bloggers take on the role of newspaper journalists and check facts, check spelling, and check grammar. Just because you have the ability to type does NOT give you the ability to be a qualified journalist. Good information on this post, but not the best grammatically.
Reply to this comment
by marswat June 10, 2009 5:02 AM PDT
"Lightning bug or lightning bolt..." is vocabulary, not grammar, so if you want to go way off topic and criticise his grammar on a tech site, for hecks sake, at least get your criticism right. Talk about shoot yourself in the foot. And "good journalism" does not come from one's ability to type or use perfect grammar it comes from the ability to get the news and publish it, get a life people!

And back to topic, I have experienced a major drop in scam et., and was wondering why. Just thought I had been lucky, guess it will be back soon enough.
Reply to this comment
by [RR]Macavity June 10, 2009 7:58 AM PDT
What I want to know is, when will they deal with the IM spammers?

I swear, I get five or six spims a day advertising this sex-hookup site, and I'm kinda peeved about it - BECAUSE I'M NOT INTERESTED.
Reply to this comment
by darfjono June 11, 2009 8:12 AM PDT
just watch it come back twice as strong like the LAST time this happened.

sheesh.
Reply to this comment
by wolfson June 12, 2009 11:34 AM PDT
Defininitly a lot les spam in by email
Reply to this comment
(22 Comments)
  • prev
  • 1
  • next
advertisement

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right