'Donbot' launches pump-and-dump run

By

Botnet moves into stock-related spam game.

A massive botnet credited with launching an attack on Twitter and Facebook last month has moved into running "pump and dump" spam attacks.

'Donbot' launches pump-and-dump run

The "Donbot" botnet has recently been connected by researchers to a rash of stock-related spam messages. Known as "pump and dump" spam, the messages attempt to convince users to invest in a low-priced stock. Once the demand for the stock has inflated its price, the spammer then sells the stock for a profit.

Researchers at Message Labs say that the attack is unique because pump and dump scams, once a common occurrence, have all but disappeared in recent years. Much of the drop was attributed to the arrest and conviction of spam kingpin Alan Ralsky.

With the changes believed to be taking place in the cybercrime world, however, such attacks could soon return to favour. Experts throughout the industry have predicted that an increasingly crowded and competitive market could force criminals to look for new ways to make money online.

The size and structure of new botnets may also play apart. MessageLabs senior analyst Paul Wood noted that stock spam operations were perfect for Donbot and other large botnets.

“The people behind the scam will have already purchased their stock and when the stock price rises, the sell it and make a big profit," said Wood.

"This technique is perfectly suited to botnet activity as it requires large volumes of mail to be sent at one time."

Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Log In

  |  Forgot your password?