Spam
Spam is arriving with MP3 files purporting to be songs from artists such as Elvis Presley

Spammers leave users 'all shook up'

Fake Elvis downloads tout bogus stock tips

Ian Williams

Spammers have launched a pump-and-dump campaign that attempts to manipulate share prices by delivering a message in an MP3 music file.

IT security firm Sophos said that emails are arriving with an attached MP3 file purporting to be a song from well-known artists such as Elvis Presley, Fergie and Carrie Underwood.

Advertisement

The files actually contain a monotone voice encouraging people to buy shares in an obscure Canadian company.

The subject line and body of the emails are usually blank, and typically contain an attachment called 'hurricanechris.mp3', 'allforone.mp3', 'carrieunderwood.mp3', 'elvis.mp3', 'baby.mp3', 'fergie.mp3' or 'bbrown.mp3'.

The voice on the MP3 file, which is randomly altered in an attempt to avoid detection by anti-spam filters, says the following:

'Hello, this is an investor alert. Exit Only Incorporated has announced it is ready to launch its new [obscured].com website, already a huge success in Canada, we are expecting amazing results in the USA. Go read the news and [obscured] on EXTO. That symbol again is EXTO. Thank you.'

Exit Only is a Canadian company that runs a website marketplace for new and used motor vehicles.

Graham Cluley, senior technology consultant at Sophos, said: "Users may click on the MP3 file expecting to hear Elvis, but they'll be all shook up when they discover it's actually a voice resembling Marvin the Paranoid Android droning on about a stock that is set to be the next big thing.

"The spammers are already likely to have purchased stock on the cheap, and are now trying to artificially inflate its price by encouraging others to purchase more.

"Once the stock rises, they'll quickly sell up, leaving the duped investors crying in the chapel. Thankfully though, it's hard to believe that many internet users will fall for such an amateurish presentation of an 'investor alert'."

Cluley advised companies to consider banning these sorts of file by default, as they can create legal as well as security headaches.

"Although the spammers seem to have a fair bit to learn about machine-generated sales patter, some companies might consider blocking all MP3s in email as a matter of course," he said.

"So many music files infringe copyright, and it can be hard for a company to establish which ones are legal and which are not after they have arrived.

"Blocking MP3s, or at least quarantining until requested by the user, can be a good way for a company to take a proactive stance against the use of email for illegal file sharing. It also has the benefit of neutralising this sort of spam at the same time."

Pump-and-dump stock campaigns account for approximately 25 per cent of all spam, according to Sophos, an increase of just 0.8 per cent since January 2005.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Viagra

Police bust online Viagra gang

Stiff penalties handed out

Malware-laden spam promises pop videos

Email links lead to malicious script and Trojan horse

Spammers dump PDF attachments

Experts point to ineffective technique

Pump-and-dump scam causes spam surge

30 per cent increase in spam reported

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

rich media

Summit: Is the ECM industry up to the information overload challenge?

In part one of our report, we talk to EMC...

hacker

Summit: UK 'in danger of being left behind' on security

Experts warn behavioural monitoring is essential to protect sensitive data

Scott Totzke

Interview: Scott Totzke, VP global security, RIM

We ask the BlackBerry maker's head of security what CIOs...

Apple Magic Mouse

Review: Apple Magic Mouse

Multi-touch makes an appearance on Apple's latest mouse

Primary Navigation