Servers in Russian and Ukraine, the final levers of the world's third-largest botnet responsible for 18 percent of all spam e-mail, have been shut down, killing the spam network known as Grum.
The six command-and-control servers in Ukraine and one in Russia were responsible for sending instructions to infected zombie computers, meaning that when the current spam template used by the zombie computers expires, they will find no new instructions and will cease sending spam, Atif Mushtaq, a senior staff scientist at internet security firm FireEye, said in a blog post.
"Grum's takedown resulted from the efforts of many individuals," wrote Mushtaq, who was instrumental in stopping the network. "This collaboration is sending a strong message to all spammers: 'Stop sending us spam. We don't need your cheap Viagra or fake Rolex. Do something else, work in a Subway or McDonald's, or sell hotdogs, but don't send us spam.'"
The first blow was dealt earlier this week when Dutch authorities took down two major servers in the Netherlands, leaving major servers in Panama and Russia.
After the Internet service provider for the Panama server shut it down, Mushtaq said he worked with several partners overnight to shut down the remaining server in Russia and six more that came online in Ukraine, finally succeeding after the servers' ISP Gazinvestproekt agreed to pull the plug at his request.
The 100,000-computer-strong spam network generated an estimated 18 billion unwanted messages per day, according to Mushtaq's blog.
Russia and Ukraine have long been seen as safe havens for illegal botnet activities, so the takedown of the servers was seen as a large success by the internet security community, technology site Arstechnica said.
A Message from The Moscow Times:
Dear readers,
We are facing unprecedented challenges. Russia's Prosecutor General's Office has designated The Moscow Times as an "undesirable" organization, criminalizing our work and putting our staff at risk of prosecution. This follows our earlier unjust labeling as a "foreign agent."
These actions are direct attempts to silence independent journalism in Russia. The authorities claim our work "discredits the decisions of the Russian leadership." We see things differently: we strive to provide accurate, unbiased reporting on Russia.
We, the journalists of The Moscow Times, refuse to be silenced. But to continue our work, we need your help.
Your support, no matter how small, makes a world of difference. If you can, please support us monthly starting from just $2. It's quick to set up, and every contribution makes a significant impact.
By supporting The Moscow Times, you're defending open, independent journalism in the face of repression. Thank you for standing with us.
Remind me later.
