New Excel spam hits e-mail

Microsoft Excel is the newest packaging spammers have created for their stock pump-and-dump scams, Commtouch Software has reported, based on the Company's analysis of billions of e-mail messages globally.

First identified and blocked by Commtouch on Saturday, July 21, at 1:20 pm GMT, the Excel spam promotes stocks in file attachments with names like "stock information-3572.xls," "invoice20202.xls," and "requested report.xls."

"Excel is a natural progression after the recent spate of PDF spam, which itself is a natural development from basic image spam," said Amir Lev, Commtouch's chief technology officer. "We expect other file formats to follow suit; think of the spam potential in PowerPoint files, or Word documents."

Spammers may assume that by wrapping the same message in a new format, they will bypass most anti-spam engines that try to analyze the content of mail messages. However technologies that rely on identifying patterns in mass e-mails, such as Commtouch's Recurrent Pattern Detection technology, block these types of messages automatically, regardless of the content or format, according to the Commtouch news release.

Like other types of spam messages, the Excel spam is being sent from zombie computers or "bots," typically home PCs that have previously been infected by Trojan malware. Spammers control massive numbers of these bots in vast "botnets" that they rally together to launch global spam and malware outbreaks.

Malware writers have used Excel in the past as a carrier for viruses, for example in a series of attacks during June and July 2006 that exploited vulnerabilities in Microsoft software, including Excel, Microsoft Word, and PowerPoint.

You may like these other stories...

As complex as federal tax can get, at least you're only dealing with one agency: the IRS. But when you get into state and local sales tax, you're coordinating hundreds of jurisdictions that are constantly changing....
All that was needed on Tuesday was a voice vote for the House of Representatives to pass a bill that would prevent state and local governments from taxing access to the Internet.Now the ball is in the Senate’s court....
Many bootstrapped startups do not have the budgets to bring on dedicated IT experts who can build out infrastructure and provide immediate solutions to end users. Small businesses must simplify both hardware and software...

Upcoming CPE Webinars

Jul 23
We can’t deny a great divide exists between the expectations and workplace needs of Baby Boomers and Millennials. To create thriving organizational performance, we need to shift the way in which we groom future leaders.
Jul 24
In this presentation Excel expert David Ringstrom, CPA revisits the Excel feature you should be using, but probably aren't. The Table feature offers the ability to both boost the integrity of your spreadsheets, but reduce maintenance as well.
Jul 31
In this session Excel expert David Ringstrom helps beginners get up to speed in Microsoft Excel. However, even experienced Excel users will learn some new tricks, particularly when David discusses under-utilized aspects of Excel.
Aug 5
This webcast will focus on accounting and disclosure policies for various types of consolidations and business combinations.