About this blog

Bob Sullivan

Corporate sneakiness. Government waste. Technology run amok. Outright scams. The Red Tape Chronicles is MSNBC.com's effort to unmask these 21st Century headaches and offer real solutions that save you time and money.

Bob Sullivan covers Internet scams and consumer fraud for MSNBC.com. He is the winner of multiple journalism awards for his coverage of online crime and author of Gotcha Capitalism: How Hidden Fees Rip You Off Every Day and What You Can Do About It. and Your Evil Twin: Behind the Identity Theft Epidemic.

Got some red tape you want Bob to untangle? Write BobSullivan@
feedback.msnbc.com.

Next e-mail hassle: audio spam

Posted: Thursday, October 18 2007 at 02:34 pm CT by Bob Sullivan

Forget image spam or even attachment spam. Get ready for audio spam. Two British companies say they've detected a new kind of spam that could be even more annoying than the old-fashioned kind, if that's possible.

Earlier this week, spammers loaded up tens of thousands of e-mails with short 30-second audio “'commercials” and let them fly across the Internet.The audio file bragged about a small company's impressive revenue growth and urged recipients to purchase its stock. In fact, the language was almost identical to that used in image spam, in vogue early this year, and Adobe Acrobat attachment spam, which hit this spring. It's not yet clear if audio spam is the next big thing, but it is a small leap forward in spam technology.

Many consumers who wouldn't open other kinds of attachments think nothing of opening an audio file, as they are generally considered safe. To make the clips more enticing, many are named after famous recording artists, such as elvis.mp3, britney.mp3, or beatles.mp3, says e-mail security firm MessageLabs.

The company said it began seeing a steady stream of these files at 11 p.m. British time (6 p.m. ET) on Wednesday. The company's filters were trapping 10,000 messages per hour by midday Thursday, it said.

The spam is obviously designed to evade anti-spam filters, which have recently gotten wise to image spam and attachment spam but apparently still let many .mp3 files reach recipients.

"Mp3 spam is a natural progression from PDF and Excel spam," said David Vella, director of Product Management at British-based GFI Software, a computer security firm that also spotted the audio spam with its anti-spam technology."There is also a social engineering aspect to this tactic because people frequently share .mp3 files."

Users who click on the file first hear an alarm sound reminiscent of the radio Emergency Broadcast System. Then, they hear a synthetic female voice hawking the stock.

It's not clear how successful such stock scams are, but the Securities and Exchange Commission has announced several investigations in the past 12 months. On Oct. 3, the SEC halted trading in three companies after a round of stock spam. On March 8, it suspended trading in 35 companies. The agency said then that about 100 million stock spam messages were being sent every week.

MAIN PAGE NEXT POST iPod crime wave? Yes, and more

Email this EMAIL THIS

27 COMMENTS

I got the audio spam while i was using my computer. i didnt open a file...maybe my teen did at some point but now i get ads in my headsets over and over again. i dont even have my email open. Not sure how to get rid of it but it's annoyiong as heck and makes it impossible to play games where you have to hear audio or to hear anyone online

We can see it coming..Eh?
premium subscription web service...$25-75 per mo.
No spam, no virus.
whoever can do that could buy google with their pocket change.

Easy, simply block *.mp3 (and other unwanted)extentions in the email filter.

I HAVE to check my spam folder - I'm in several e-mail groups and sometimes the filter throws all kinds of stuff in there.

Have to agree w/ the hate the audio ads comment - LOATHE the "You've won two free iPods/iPhones" thing - they were touting that there were going to give out iPhones BEFORE they even came out when it was impossible to get them. In fact, the ads started immediately after they were announced!

I think Brad is as ignorant as a giraffe turd.

I got an audio SPAM that said my penis was not big enough. So I strapped a concrete block to it and hung it over the side of a building. POst this or I'll cut it off.

If you don't know who it is, DON'T OPEN IT

I got britney.mp3 last night. Low res, short and from someone I don't know with no real reason why they sent it. I reported to Postini (my spam filter) and hopefully they will keep it out of my inbox.

With reference to the post above (Sent Oct 19, 2007 12:45:00 AM)…most organizations will simply choose block all mp3 attachments, and this might be a viable solution for them since I don’t see how mp3's can be of much use to organizations. Having said that, some would prefer to have their anti spam solution filter out this type of spam – a quick search through Google on MP3 Spam pointed me to GFI MailEssentials (http://www.gfi.com/mes/), the company says it’s able to block mp3 spam, as well as image spam, it might be worth looking though. Hope this helped.

cecil you actually read your spam folder. Even when i am good about checking my email daily I still have something like 300 messages in my spam folder but i have also had my email account for over 6 years now and use it for everything. I am honestly suprised spammers make money considering how much competion there seems to be among them. If i wait a week or so it hits into the 1000 2000 range.

Brad's a bit of a nitwit. He not only makes his name visible in the above post, but his email address too.

just wanted to ask, do any of u know of any filters that are able to block audio spam, or even image spam?

I already leave my mute button on as long as I'm web browsing or reading email unless I know what it is and who it's from.

Why? I hate listening to all those noisy ads and other audio on the pages I visit. I believe this audio spam is real and I dread receiving multi-megabyte junk mail.

I have been forwarding all this crap to spam@uce.gov, the chair of something with viagra, my congressman. Some of the spam is filthy except to those who play that game. Now audio's.

Brad Freeman - your response was incoherent. You read a report of an new spamming technique, then blame the writer because you don't think the spam technique would actually be utilized? Wow!

No, really, Mr. Freeman--I got the first one, today. I always go through my spam folder before mass deleting. The subject line was "Jill Scott." She is a singer in Tyler Perry's new movie, "Why Did I Get Married?" She just released a new album.

Spam SUCKS. . . Jerks.

audio files are pretty big and they cost more bandwith to send and receive so they could fill up peoples inboxes very fast.

just something else to ignore... maybe even a little easier to. i don't even have the audio enabled on the computer i use to read my e-mail

since it shows up as an attached MP3 file, I just DUMP it without listening (WHEN I even have my speakers on - which is RARE)

I'd like to read Mr. Freeman's reasons for making his assertions above.

Actually, the filters at my company have picked up 3 of these messages so far. Effective, who knows, but definitely bandwith hogs...

Brad, I applaud your confidence in humanity, but never underestimate the stupidity of people, or at least some of the people. It only takes a fraction of a percent of people to fall for it to make it profitable. Why pick on the journalist? Are you having a bad day?

After all these years, I'm still astounded at the number of people who actually open and respond to junk mail (snail & internet.) Filter your mail, delete anything from anybody you don't know. Why is that so hard for some folks to comprehend?

Excellent article; thank you! (I think that Mr. Freeman may agree, too, once the audio spam starts hitting in boxes.)

Actually Brad, I've been getting mp3 spam for the last couple days. Yes, it's stupid and ineffective for people who know better but spam isn't designed for them.

I have to disagree with Brad. As a data security expert, I can attest to the threat MP3 spam can potentially be.

It will not be long until the spammers put malware script into the audio files.

The next step is to upload these infect files onto file sharing sites.

Although, that WOULD teach illegal downlaoders a lesson!!

Stupid, and ineffective - not even spammers are that crazy. Nice try, Mr. Eager Journalist.

SEND A COMMENT

PLEASE READ: All comments must be approved before appearing in the thread; time and space constraints prevent all comments from appearing. We will only approve comments that are directly related to the blog, use appropriate language and are not attacking the comments of others. Firms mentioned in our comment area are welcome to add their own comments.

Message (please, no HTML tags. Web addresses will be hyperlinked):

TRACKBACKS

Trackbacks are links to weblogs that reference this post. Like comments, trackbacks do no appear until approved by us. The trackback URL for this post is: http://www.typepad.com/services/trackback/6a00d83451b0aa69e200e54f0e71fb8834

BUY BOB SULLIVAN'S BOOK

StopGettingRippedOff Bob Sullivan's new book tells you why American consumers are such easy targets, and how you can always get a fair deal. Order it here.

Or, learn about Bob's other books by clicking here.

Bob Sullivan