Nick Kelly
2006 2004 2006 30% 2005 5% 2006 50% 500% 70% 60% Growth in Image Spam (October 1 through December 31, 2006) Percentage of Total Spam 50% 40% 30% 20% 2006 3 10% McAfee Avert Labs 0% October November December 1
McAfee.jpg.gif 2
URL web URL botnet zombie pump and dump URL Oxford Purdue 5% 6% 7% 2007 1 16 2007 2 22 $0.300 RSUR (Remote Surveillance Technology, Inc.) $0.275 $0.250 $0.225 DOLLARS PER SHARE $0.200 $0.175 $0.150 $0.125 $0.100 $0.075 $0.050 $0.025 Remote Surveillance Technology Oct Nov Dec 2007 Feb Mar (RSUR) 1.00M 2007 1 2007 2 750K NUMBER OF SHARES SOLD / DAY 500K 250K http://stockcharts.com/h-sc/ui?c=rsur Timeframe when spammer began purchasing stock RSUR spam stock campaign 3
(SEC) 2006 9 2007 1 35 10 SEC Operation Spamalot 10 SEC 300 / hash buster.gif 4
URL 5
6
URL Microsoft Outlook Outlook Express Thunderbird OCR OCR 7
OCR BUY U L J Y X OCR OCR OCR OCR CPU OCR 100% 8
McAfee McAfee OCR McAfee McAfee McAfee 2 Checkmark PREMIUM West Coast Labs 97% 1 McAfee Avert Labs McAfee McAfee IP McAfee botnet zombie IP McAfee IP IP McAfee IP botnet zombie IP botnet zombie IP McAfee OCR McAfee McAfee McAfee McAfee McAfee 99% 1 McAfee 2006 10 http://www.westcoastlabs.org/cm-av-products.asp?comp_id=17&cat_id=13 9
10 X Y McAfee URL URL McAfee McAfee McAfee McAfee McAfee McAfee McAfee McAfee McAfee Avert Labs McAfee 24/7 McAfee Avert Labs 12 17 McAfee McAfee 10
McAfee 2007 botnet McAfee McAfee Nick Kelly McAfee Avert Labs Avert Labs Kelly 17 IT McAfee, Inc. 3965 Freedom Circle, Santa Clara, CA 95054, 888.847.8766 www.mcafee.com c 2004-2007 McAfee, Inc McAfee, Inc McAfee McAfee Avert Avert Labs McAfee, Inc / 11