Security researchers take out botnet responsible for 18 billion spam emails a day

The four year old botnet - known as Grum - is believed to have been responsible for around 18% of the world's spam emails

If you're a fan of fake Rolex watches and cheap Viagra look away now.

A huge spam botnet responsible for an estimated 18 billion messages a day has been taken out by security researchers.

The four year old botnet - known as Grum - is believed to have been responsible for around 18% of the world's spam emails.

A botnet is a cluster of infected computers used by cybercriminals to send a variety of spam emails - often offering cheap Viagra, fake watches or unusual dating solutions.

The cluster of computers are usually infected using malware.

Security company FireEye and spam-tracking service SpamHaus worked with ISPs to shut down the illegal network.

The control servers for Grum were found to be mainly based in Ukraine, Russia and Panama.

FireEye security has been monitoring Grum since 2008 working in combination with the Russia Computer Security Incident Response Team and the Spamhaus Project.

Spamhaus estimated that up to 120,000 IP addresses were used to send spam each day, but that following the takedown the number reduced to around 21,000.

Writing on the FireEye blog Atif Mushtaq, a security researcher with FireEye said, "Grum's takedown resulted from the efforts of many individuals."

"This collaboration is sending a strong message to all the spammers: Stop sending us spam. We don't need your cheap Viagra or fake Rolex."

Experts anticipate that the takedown should result in a significantly reduced level of junk mail.

On Monday a Dutch server involved in Grum was shut down.

On Tuesday command and control servers based out of Panama were also shut.

"With the shutdown of the Panamanian server, a complete segment was dead forever", says Mushtaq.

However, the good news didn't last long as the bot herders - who scan networks to find weak or vulnerable systems to install their bot program - started pointing the command and control servers to secondary servers located in Ukraine.

Mushtaq says that in the past Ukraine had been something of a 'safe haven' for bot herders and that shutting down servers there had "never been easy."

Around 20,000 computers are thought to be still part of the botnet but are now ineffective without active control and command servers.

In recent years there has been a concerted effort to take down some of the largest botnets.

According to Atif Mushtaq global spam volume is at a record low thanks to the research community's effort against spammers.

Mushtaq is however clear about the scale of the problems involved in taking down botnets: "The research community needs to maintain this pressure until we reach a point where the bad guys start thinking that becoming a spammer is not worth the risk. If I were to rank Grum's takedown difficulty level from one to five where five is the most difficult, I would give Grum a two.

"When the appropriate channels are used, even ISPs within Russia and Ukraine can be pressured to end their cooperation with bot herders. There are no longer any safe havens."

FireEye Grum Takedown Q&A

How significant is the takedown of Grum?

Identifying the control servers quick enough so they can be shutdown is significant as it shows that the right personnel with the right tools can win.

How did FireEye bring down Grum?  (in the simplest terms possible!)

FireEye identifies command and control malware call-backs without prior signatures or URLs, by tracking the servers real time even when they move the teams were able to close in and shut them down.

Will people notice a reduction in the amount of spam they receive?

Absolutely. Time will always tell, but removing the command and control for the third largest botnet that was generating spam can only be a good thing.

What advice would you give people to avoid getting a deluge of spam emails?

Your email address is very personal and should be treated as such.

Do your best to make sure it's not published on a website for all the world to see, protect yourself from malware and don't open or reply to emails that don't make sense – even if they appear to be from people that you know.

Life and Style
ebookNow available in paperback
ebookPart of The Independent’s new eBook series The Great Composers
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Ashdown Group: Application Developer - C#.Net, ASP.Net - Cambridgeshire

    Negotiable: Ashdown Group: Software Application Developer (C# & ASP.Net, SQL S...

    Ashdown Group: Front-End Developer / Front-End Designer - City of London

    £27000 - £33000 per annum + Excellent benefits: Ashdown Group: Front-End Devel...

    Recruitment Genius: 1st Line Customer Support Technician

    £15000 - £19000 per annum: Recruitment Genius: This Waterlooville based softwa...

    Ashdown Group: C# Developer - (C#, VB.Net, SQL, Git, TDD)

    Negotiable: Ashdown Group: Developer (C#, VB & ASP.Net, SQL Server, TSQL) - Pe...

    Day In a Page

    War with Isis: Iraq's government fights to win back Tikrit from militants - but then what?

    Baghdad fights to win back Tikrit from Isis – but then what?

    Patrick Cockburn reports from Kirkuk on a conflict which sectarianism has made intractable
    Living with Alzheimer's: What is it really like to be diagnosed with early-onset dementia?

    What is it like to live with Alzheimer's?

    Depicting early-onset Alzheimer's, the film 'Still Alice' had a profound effect on Joy Watson, who lives with the illness. She tells Kate Hilpern how she's coped with the diagnosis
    The Internet of Things: Meet the British salesman who gave real-world items a virtual life

    Setting in motion the Internet of Things

    British salesman Kevin Ashton gave real-world items a virtual life
    Election 2015: Latest polling reveals Tories and Labour on course to win the same number of seats - with the SNP holding the balance of power

    Election 2015: A dead heat between Mr Bean and Dick Dastardly!

    Lord Ashcroft reveals latest polling – and which character voters associate with each leader
    Audiences queue up for 'true stories told live' as cult competition The Moth goes global

    Cult competition The Moth goes global

    The non-profit 'slam storytelling' competition was founded in 1997 by the novelist George Dawes Green and has seen Malcolm Gladwell, Salman Rushdie and Molly Ringwald all take their turn at the mic
    Pakistani women come out fighting: A hard-hitting play focuses on female Muslim boxers

    Pakistani women come out fighting

    Hard-hitting new play 'No Guts, No Heart, No Glory' focuses on female Muslim boxers
    Leonora Carrington transcended her stolid background to become an avant garde star

    Surreal deal: Leonora Carrington

    The artist transcended her stolid background to become an avant garde star
    LGBT History Month: Pupils discuss topics from Sappho to same-sex marriage

    Education: LGBT History Month

    Pupils have been discussing topics from Sappho to same-sex marriage
    11 best gel eyeliners

    Go bold this season: 11 best gel eyeliners

    Use an ink pot eyeliner to go bold on the eyes with this season's feline flicked winged liner
    Cricket World Cup 2015: Tournament runs riot to make the event more hit than miss...

    Cricket World Cup runs riot to make the event more hit than miss...

    The tournament has reached its halfway mark and scores of 300 and amazing catches abound. One thing never changes, though – everyone loves beating England
    Katarina Johnson-Thompson: Heptathlete ready to jump at first major title

    Katarina Johnson-Thompson: Ready to jump at first major title

    After her 2014 was ruined by injury, 21-year-old Briton is leading pentathlete going into this week’s European Indoors. Now she intends to turn form into gold
    Syrian conflict is the world's first 'climate change war', say scientists, but it won't be the last one

    Climate change key in Syrian conflict

    And it will trigger more war in future
    How I outwitted the Gestapo

    How I outwitted the Gestapo

    My life as a Jew in wartime Berlin
    The nation's favourite animal revealed

    The nation's favourite animal revealed

    Women like cuddly creatures whilst men like creepy-crawlies
    Is this the way to get young people to vote?

    Getting young people to vote

    From #VOTESELFISH to Bite the Ballot