Security researchers take out botnet responsible for 18 billion spam emails a day

The four year old botnet - known as Grum - is believed to have been responsible for around 18% of the world's spam emails

If you're a fan of fake Rolex watches and cheap Viagra look away now.

A huge spam botnet responsible for an estimated 18 billion messages a day has been taken out by security researchers.

The four year old botnet - known as Grum - is believed to have been responsible for around 18% of the world's spam emails.

A botnet is a cluster of infected computers used by cybercriminals to send a variety of spam emails - often offering cheap Viagra, fake watches or unusual dating solutions.

The cluster of computers are usually infected using malware.

Security company FireEye and spam-tracking service SpamHaus worked with ISPs to shut down the illegal network.

The control servers for Grum were found to be mainly based in Ukraine, Russia and Panama.

FireEye security has been monitoring Grum since 2008 working in combination with the Russia Computer Security Incident Response Team and the Spamhaus Project.

Spamhaus estimated that up to 120,000 IP addresses were used to send spam each day, but that following the takedown the number reduced to around 21,000.

Writing on the FireEye blog Atif Mushtaq, a security researcher with FireEye said, "Grum's takedown resulted from the efforts of many individuals."

"This collaboration is sending a strong message to all the spammers: Stop sending us spam. We don't need your cheap Viagra or fake Rolex."

Experts anticipate that the takedown should result in a significantly reduced level of junk mail.

On Monday a Dutch server involved in Grum was shut down.

On Tuesday command and control servers based out of Panama were also shut.

"With the shutdown of the Panamanian server, a complete segment was dead forever", says Mushtaq.

However, the good news didn't last long as the bot herders - who scan networks to find weak or vulnerable systems to install their bot program - started pointing the command and control servers to secondary servers located in Ukraine.

Mushtaq says that in the past Ukraine had been something of a 'safe haven' for bot herders and that shutting down servers there had "never been easy."

Around 20,000 computers are thought to be still part of the botnet but are now ineffective without active control and command servers.

In recent years there has been a concerted effort to take down some of the largest botnets.

According to Atif Mushtaq global spam volume is at a record low thanks to the research community's effort against spammers.

Mushtaq is however clear about the scale of the problems involved in taking down botnets: "The research community needs to maintain this pressure until we reach a point where the bad guys start thinking that becoming a spammer is not worth the risk. If I were to rank Grum's takedown difficulty level from one to five where five is the most difficult, I would give Grum a two.

"When the appropriate channels are used, even ISPs within Russia and Ukraine can be pressured to end their cooperation with bot herders. There are no longer any safe havens."

FireEye Grum Takedown Q&A

How significant is the takedown of Grum?

Identifying the control servers quick enough so they can be shutdown is significant as it shows that the right personnel with the right tools can win.

How did FireEye bring down Grum?  (in the simplest terms possible!)

FireEye identifies command and control malware call-backs without prior signatures or URLs, by tracking the servers real time even when they move the teams were able to close in and shut them down.

Will people notice a reduction in the amount of spam they receive?

Absolutely. Time will always tell, but removing the command and control for the third largest botnet that was generating spam can only be a good thing.

What advice would you give people to avoid getting a deluge of spam emails?

Your email address is very personal and should be treated as such.

Do your best to make sure it's not published on a website for all the world to see, protect yourself from malware and don't open or reply to emails that don't make sense – even if they appear to be from people that you know.

Arts and Entertainment
The Doctor and Clara have their first real heart to heart since he regenerated in 'Deep Breath'
TV
Life and Style
Apple showed no sign of losing its talent for product launches with the new, slightly larger iPhone 6 making headlines
techSecurity breaches and overhyped start-ups dominated a year in which very little changed (save the size of your phone)
Arts and Entertainment
Jamie Oliver
filmTV chef Jamie Oliver turned down role in The Hobbit
News
The official police photograph of Dustin Diamond taken after he was arrested in Wisconsin
peopleDownfall of the TV star charged with bar stabbing
PROMOTED VIDEO
Life and Style
ebookNow available in paperback
ebooks
ebookPart of The Independent’s new eBook series The Great Composers
Arts and Entertainment
Jeremy Clarkson, left, and Richard Hammond upset the locals in South America
tvReview: Top Gear team flee Patagonia as Christmas special reaches its climax in the style of Butch and Sundance
News
people
Sport
Ashley Barnes of Burnley scores their second goal
footballMan City vs Burnley match report
Arts and Entertainment
Peter Mayhew as Chewbacca alongside Harrison Ford's Han Solo in 'Star Wars'
film
News
i100
Arts and Entertainment
Man of action: Christian Bale stars in Exodus: Gods and Kings
film
Arts and Entertainment
Tracy Emin's 1998 piece 'My Bed' on display at Christie's
artOne expert claims she did not
News
Ernesto Che Guevara and Fidel Castro, right, met at Havana Golf Club in 1962 to mock the game
newsFidel Castro ridiculed the game – but now investment in leisure resort projects is welcome
News
Hackers revealed Oscar-winning actress Lawrence was paid less than her male co-stars in American Hustle
people
Arts and Entertainment
Clueless? Locked-door mysteries are the ultimate manifestation of the cerebral detective story
booksAs a new collection of the genre’s best is published, its editor explains the rules of engagement
Sport
Robin van Persie is blocked by Hugo Lloris
footballTottenham vs Manchester United match report
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Recruitment Genius: PHP Web Developer

    £30000 - £50000 per annum: Recruitment Genius: Are you a Web Developer looking...

    Ashdown Group: Moodle Developer (PHP ,Linux, Apache, MySQL, Moodle)

    £35000 - £45000 per annum: Ashdown Group: Moodle Developer (PHP ,Linux, Apache...

    Recruitment Genius: Web Developer

    £17000 - £30000 per annum: Recruitment Genius: This is a fantastic opportunity...

    Recruitment Genius: Junior .NET Web Developer - Winform / MVC

    £21000 - £26000 per annum: Recruitment Genius: This Award-winning pharma softw...

    Day In a Page

    A timely reminder of the bloody anniversary we all forgot

    A timely reminder of the bloody anniversary we all forgot

    Who remembers that this week we enter the 150th anniversary year of the end of the American Civil War, asks Robert Fisk
    Homeless Veterans appeal: Former soldiers pay their respects to a friend who also served

    Homeless Veterans appeal

    Former soldiers pay their respects to a friend who also served
    Downfall of Dustin 'Screech' Diamond, the 'Saved By The Bell' star charged with bar stabbing

    Scarred by the bell

    The downfall of the TV star charged with bar stabbing
    Why 2014 was a year of technological let-downs

    Why 2014 was a year of technological let-downs

    Security breaches and overhyped start-ups dominated a year in which very little changed (save the size of your phone)
    Cuba's golf revolution: But will the revolutionary nation take 'bourgeois' game to its heart?

    Will revolutionary Cuba take 'bourgeois' golf to its heart?

    Fidel Castro ridiculed the game – but now investment in leisure resort projects is welcome
    The Locked Room Mysteries: As a new collection of the genre’s best is published, its editor Otto Penzler explains the rules of engagement

    The Locked Room Mysteries

    As a new collection of the genre’s best is published, its editor explains the rules of engagement
    Amy Adams on playing painter Margaret Keane in Tim Burton's Big Eyes

    How I made myself Keane

    Amy Adams hadn’t wanted to take the role of artist Margaret Keane, because she’d had enough of playing victims. But then she had a daughter, and saw the painter in a new light
    Ed Richards: Parting view of Ofcom chief. . . we hate jokes on the disabled

    Parting view of Ofcom chief... we hate jokes on the disabled

    Bad language once got TV viewers irate, inciting calls to broadcasting switchboards. But now there is a worse offender, says retiring head of the media watchdog, Ed Richards
    A look back at fashion in 2014: Wear in review

    Wear in review

    A look back at fashion in 2014
    Ian Herbert: My 10 hopes for sport in 2015. Might just one of them happen?

    Ian Herbert: My 10 hopes for sport in 2015

    Might just one of them happen?
    War with Isis: The West needs more than a White Knight

    The West needs more than a White Knight

    Despite billions spent on weapons, the US has not been able to counter Isis's gruesome tactics, says Patrick Cockburn
    Return to Helmand: Private Davey Graham recalls the day he was shot by the Taliban

    'The day I was shot by the Taliban'

    Private Davey Graham was shot five times during an ambush in 2007 - it was the first, controversial photograph to show the dangers our soldiers faced in Helmand province
    Revealed: the best and worst airlines for delays

    Revealed: the best and worst airlines for delays

    Many flyers are failing to claim compensation to which they are entitled, a new survey has found
    The stories that defined 2014: From the Scottish independence referendum to the Ice Bucket Challenge, our writers voice their opinions

    The stories that defined 2014

    From the Scottish independence referendum to the Ice Bucket Challenge, our writers voice their opinions
    Stoke-on-Trent becomes first British city to be classified as 'disaster resilient' by the United Nations

    Disaster looming? Now you know where to head...

    Which British city has become the first to be awarded special 'resilience' status by the UN?