Antispam advocate succumbs to spammer

A prominent crusader against unsolicited e-mail ads withdrew from an escalating cyberwar with spammers on Wednesday after his Web site and numerous others came under a massive retaliatory attack.

Blue Security, a company that provided antispam software and was widely praised for orchestrating a kind of do-it-yourself campaign to spam spammers, has "ceased all antispam operations," said Sandra Fathi, a spokeswoman for the company.

The surrender comes after the company's Web site, along with those of many of its partners, were hobbled by a denial-of-service attack earlier this month. The DoS attack, which used thousands of commandeered computers to overload the sites' servers with traffic, is believed to have originated with one Russia-based spammer, Fathi said.

The brazen show of power by the spammer is reflective of the defiant nature of these kinds of rogue advertisers. Almost as old as the Internet, unsolicited e-mail continues to swamp e-mail in-boxes and to clog servers, even as law enforcement agencies and regulatory bodies have tried to stop the practice.

Eran Reshef, Blue Security's CEO, thought he had the answer. He encouraged half a million of the company's customers to send replies to the spam they received. The combined traffic overloaded the spammers' servers and crippled their ability to send e-mails. This resulted in some well-known spam companies agreeing to stop e-mailing Blue Security's customers.

Blue Security's triumph was short-lived. Instead of capitulating, one spammer launched a denial-of-service attack earlier this month. According to security Web site SecurityFocus, the attacks overwhelmed several Web sites and Internet service providers. The spammer then threatened Blue Security.

The company could either shut down or the next attack would include a computer virus.

With innocent companies and Internet users potentially at risk, Reshef had no choice but to yield to the demands, Fathi said.

"The company is unable to fight this battle on its own," Fathi said. "This (spammer) has shown that he's willing to harm hundreds of innocent bystanders...(Reshef) didn't want to take the risk that these other businesses would come under attack."

Blue Security is now trying to determine whether there are other uses for its antispam technology, she said.

More from News.com on this story's topics

Security

Create an email alert | RSS feed

Spam and phishing

Create an email alert | RSS feed

See more CNET content tagged:
spammer, anti-spam, denial of service, attack, e-mail

Add a Comment (Log in or register) 36 comments (Page 1 of 2)
Unbelievable
by Dead Soulman May 17, 2006 7:18 PM PDT
It's kind of interesting that a company trying to help people of fighting spammers, has to yield to their threats.

I did try to visit their site several times in the last 10 days, and I kept on getting an error message on my browser.

This is pretty shameless that governments have no intention in protecting us from these criminals.
Reply to this comment
Unbelievable
by Dead Soulman May 17, 2006 7:18 PM PDT
It's kind of interesting that a company trying to help people of fighting spammers, has to yield to their threats.

I did try to visit their site several times in the last 10 days, and I kept on getting an error message on my browser.

This is pretty shameless that governments have no intention in protecting us from these criminals.
Reply to this comment
I wonder if...
by Jesus#2 May 17, 2006 7:53 PM PDT
Microsoft gets a cut from the spammer's profits.. after all...
without Windows.. this type of thing couldn't happen.

I get a little satisfaction. In Apple's Mail application, there is an
option to "Bounce to Sender"... I like doing this with the junk
mail I get. This way.. it is essentially the same thing thins guy is
proposing...but it also makes it seem like my address is not
valid.. so they stop sending me crap.

After doing this for a while.. I get very little junk mail on an
account that I have had for 4 years.. and use for everything.
Reply to this comment View all 2 replies
I wonder if...
by Jesus#2 May 17, 2006 7:53 PM PDT
Microsoft gets a cut from the spammer's profits.. after all...
without Windows.. this type of thing couldn't happen.

I get a little satisfaction. In Apple's Mail application, there is an
option to "Bounce to Sender"... I like doing this with the junk
mail I get. This way.. it is essentially the same thing thins guy is
proposing...but it also makes it seem like my address is not
valid.. so they stop sending me crap.

After doing this for a while.. I get very little junk mail on an
account that I have had for 4 years.. and use for everything.
Reply to this comment View all 2 replies
The one thing about this article that sticks out to me...
by blbk May 17, 2006 7:58 PM PDT
"encouraged half a million of the company's customers to send replies to the spam they received" - Assuming that statement is even partially accurate, it is an ineffective irresponsible and unintelligent concept. Except on the occasions that a few of the more professional spammers scrub their lists, noone sends junk with an even remotely valid reply address. It's rare enough for a spammer to even use their own mail realy.
Reply to this comment View reply
The one thing about this article that sticks out to me...
by blbk May 17, 2006 7:58 PM PDT
"encouraged half a million of the company's customers to send replies to the spam they received" - Assuming that statement is even partially accurate, it is an ineffective irresponsible and unintelligent concept. Except on the occasions that a few of the more professional spammers scrub their lists, noone sends junk with an even remotely valid reply address. It's rare enough for a spammer to even use their own mail realy.
Reply to this comment View reply
Wait a minute!
by rshew May 17, 2006 8:09 PM PDT
If these guys know who the threatening spammer is, why don't they, and their clients or whatever other parties were being targeted, simply stick a filter on the mail servers which simply deletes the messages? I don't know what characteristics would work best for this -- IP addy, country of origin? -- but I have at least three concrete ways to kill definable spam with no action on my part and I'm not running a mail server.

The same goes for viral messages. If it can be identified -- in this case most likely by the virus being used -- it can most likely be killed automatically.

This article is a little weird. And what's with them trying to find another use for their product? Huh?
Reply to this comment View all 5 replies
Wait a minute!
by rshew May 17, 2006 8:09 PM PDT
If these guys know who the threatening spammer is, why don't they, and their clients or whatever other parties were being targeted, simply stick a filter on the mail servers which simply deletes the messages? I don't know what characteristics would work best for this -- IP addy, country of origin? -- but I have at least three concrete ways to kill definable spam with no action on my part and I'm not running a mail server.

The same goes for viral messages. If it can be identified -- in this case most likely by the virus being used -- it can most likely be killed automatically.

This article is a little weird. And what's with them trying to find another use for their product? Huh?
Reply to this comment View all 5 replies
Yay! The cyber terrorists win!
by ejevo May 18, 2006 5:33 AM PDT
I see the war online is going about as good as the war against terrorists in the real world.
Reply to this comment View reply
Yay! The cyber terrorists win!
by ejevo May 18, 2006 5:33 AM PDT
I see the war online is going about as good as the war against terrorists in the real world.
Reply to this comment View reply
1 | 2 | Next 10 Comments >>
Powered by Jive Software
advertisement
RSS Feeds
Add headlines from CNET News.com to your homepage or feedreader.
Google
Yahoo
MSN
More feeds available in our RSS feed index.

Latest tech news headlines

Most Popular Stories
Google's search secret: It gets rid of you
Developer creates copy-paste tech for iPhone
Will Wright on the origins of 'Spore'
Palm Treo Pro: Not digging it
American Airlines launches in-flight Wi-Fi
Markets

Market news, charts, SEC filings, and more

Related quotes

Dow Jones Industrials (0.11%) 12.78 11,430.21
S&P 500 (0.25%) 3.18 1,277.72
NASDAQ (0.00%) 0.00 1,816.15
CNET TECH (-0.11%) -1.71 1,629.09
  Symbol Lookup
advertisement
On The Insider: Ricky Martin - Father of Twins!
Advanced
search
Advanced
search
Visit other CBS Interactive sites