Messaging spam

Last updated

Messaging spam, sometimes called SPIM, [1] [2] [3] is a type of spam targeting users of instant messaging (IM) services, SMS, or private messages within websites.

Contents

Instant messaging applications

Messaging spam on Telegram. SPIM on Telegram.png
Messaging spam on Telegram.

Instant messaging systems, such as Telegram, WhatsApp, Twitter Direct Messaging, Kik, Skype and Snapchat are all targets for spammers. [4] Many IM services are publicly linked to social media platforms, which may include information on the user such as age, sex, location and interests. Advertisers and scammers can gather this information, sign on to the service, and send unsolicited messages which could contain scam links, pornographic material, malware or ransomware. With most services users can report and block spam accounts, [5] or set privacy settings so only contacts can contact them.

Countermeasures

Pornographic IM spambots

Spam-bots often sign on to popular messaging services like Kik [7] or Skype to spread pornographic images. Often if the user responds they receive a URL inviting them to a private livestream that will ask them to enter credit card details for "age verification".

These bots target random usernames; this often results in minors receiving unsolicited pornographic images.

On Windows NT-based systems

Example of Messenger Service spam from 2023. Netspam.gif
Example of Messenger Service spam from 2023.

In 2002, a number of spammers began abusing the Windows Messenger service, a function of Windows designed to allow administrators to send alerts to users' workstations (not to be confused with Windows Messenger or Windows Live Messenger, a free instant messaging application) in Microsoft's Windows NT-based operating systems. Messenger Service spam appears as normal dialog boxes containing the spammer's message. These messages are easily blocked by firewalls configured to block packets to the NetBIOS ports 135-139 and 445 as well as unsolicited [[User Datagram Protocol|UDP]] packets to ports above 1024. [8] Additionally, Windows XP Service Pack 2 disables the Messenger Service by default.

Messenger Service spammers frequently send messages to vulnerable Windows machines with a URL. The message promises the user to eradicate spam messages sent via the Messenger Service. The URL leads to a website where, for a fee, users are told how to disable the Messenger service. Though the Messenger is easily disabled for free by the user, this works because it creates a perceived need and then offers an immediate solution.[ citation needed ]

In opinion-based recommender systems

In an opinion based recommender system, an important concern is how to evaluate the user-generated reviews on the items. One of the purpose of this evaluation is to identify malicious or spam reviews. Poorly written reviews are considered helpless to the recommender system. However, even if a review is well generated, they can still be harmful to the recommender system by their biased prejudice to form an actual advertisement or slander towards a target item.

Current approach of spam detection methods includes analyzing the spam text and identifying the spam reviewers by their reviews and activities. For the first kind, a machine learning application on review text has been developed. [9] For the second kind, researchers use network motif analysis technique to identify spam reviewers by their recurring reviewing activity. [10]

Related Research Articles

<span class="mw-page-title-main">AIM (software)</span> Instant messaging service

AIM was an instant messaging and presence computer program created by AOL, which used the proprietary OSCAR instant messaging protocol and the TOC protocol to allow registered users to communicate in real time.

ICQ New is a cross-platform instant messaging (IM) and VoIP client. The name ICQ derives from the English phrase "I Seek You". Originally developed by the Israeli company Mirabilis in 1996, the client was bought by AOL in 1998, and then by Mail.Ru Group in 2010.

<span class="mw-page-title-main">Spamming</span> Unsolicited electronic messages, especially advertisements

Spamming is the use of messaging systems to send multiple unsolicited messages (spam) to large numbers of recipients for the purpose of commercial advertising, for the purpose of non-commercial proselytizing, for any prohibited purpose, or simply repeatedly sending the same message to the same user. While the most widely recognized form of spam is email spam, the term is applied to similar abuses in other media: instant messaging spam, Usenet newsgroup spam, Web search engine spam, spam in blogs, wiki spam, online classified ads spam, mobile phone messaging spam, Internet forum spam, junk fax transmissions, social spam, spam mobile apps, television advertising and file sharing spam. It is named after Spam, a luncheon meat, by way of a Monty Python sketch about a restaurant that has Spam in almost every dish in which Vikings annoyingly sing "Spam" repeatedly.

<span class="mw-page-title-main">Instant messaging</span> Form of communication over the internet

Instant messaging (IM) technology is a type of online chat allowing immediate transmission of messages over the Internet or another computer network. Messages are typically transmitted between two or more parties, when each user inputs text and triggers a transmission to the recipient(s), who are all connected on a common network. It differs from email in that conversations over instant messaging happen in real-time. Most modern IM applications use push technology and also add other features such as emojis, file transfer, chatbots, voice over IP, or video chat capabilities.

Trillian is a proprietary multiprotocol instant messaging application created by Cerulean Studios. It is currently available for Microsoft Windows, Mac OS X, Linux, Android, iOS, BlackBerry OS, and the Web. It can connect to multiple IM services, such as AIM, Bonjour, Facebook Messenger, Google Talk (Hangouts), IRC, XMPP (Jabber), VZ, and Yahoo! Messenger networks; as well as social networking sites, such as Facebook, Foursquare, LinkedIn, and Twitter; and email services, such as POP3 and IMAP.

<span class="mw-page-title-main">Yahoo! Messenger</span> Instant messaging protocol

Yahoo! Messenger was an advertisement-supported instant messaging client and associated protocol provided by Yahoo!. Yahoo! Messenger was provided free of charge and could be downloaded and used with a generic "Yahoo ID" which also allowed access to other Yahoo! services, such as Yahoo! Mail. The service also offered VoIP, file transfers, webcam hosting, a text messaging service, and chat rooms in various categories.

<span class="mw-page-title-main">Miranda NG</span> Free instant messenger for Microsoft Windows

Miranda NG is an open-source multiprotocol instant messaging application, designed for Microsoft Windows. Miranda NG is free software distributed under the GNU GPL-2.0-or-later.

<span class="mw-page-title-main">Mobile phone spam</span> Unwanted communication through a mobile phone

Mobile phone spam is a form of spam, directed at the text messaging or other communications services of mobile phones or smartphones. As the popularity of mobile phones surged in the early 2000s, frequent users of text messaging began to see an increase in the number of unsolicited commercial advertisements being sent to their telephones through text messaging. This can be particularly annoying for the recipient because, unlike in email, some recipients may be charged a fee for every message received, including spam. Mobile phone spam is generally less pervasive than email spam, where in 2010 around 90% of email is spam. The amount of mobile spam varies widely from region to region. In North America, mobile spam steadily increased after 2008 and accounted for half of all mobile phone traffic by 2019. In parts of Asia up to 30% of messages were spam in 2012.

A Joe job is a spamming technique that sends out unsolicited e-mails using spoofed sender data. Early Joe jobs aimed at tarnishing the reputation of the apparent sender or inducing the recipients to take action against them, but they are now typically used by commercial spammers to conceal the true origin of their messages and to trick recipients into opening emails apparently coming from a trusted source.

The landscape for instant messaging involves cross-platform instant messaging clients that can handle one or multiple protocols. Clients that use the same protocol can typically federate and talk to one another. The following table compares general and technical information for cross-platform instant messaging clients in active development, each of which have their own article that provide further information.

<span class="mw-page-title-main">Windows Messenger service</span> Local network notification service for Microsoft Windows

Messenger service is a network-based system notification Windows service by Microsoft that was included in some earlier versions of Microsoft Windows.

Microsoft Notification Protocol is an instant messaging protocol developed by Microsoft for use by the Microsoft Messenger service and the instant messaging clients that connect to it, such as Skype since 2014, and the earlier Windows Live Messenger, MSN Messenger, Windows Messenger, and Microsoft Messenger for Mac. Third-party clients such as Pidgin and Trillian can also communicate using the protocol. MSNP was first used in a publicly available product with the first release of MSN Messenger in 1999.

A LAN Messenger is an instant messaging program for computers designed for use within a single local area network (LAN).

Skype offers a number of features based around calling, messaging, video chat, and file and screen sharing. The following is a partial list of Skype's features:

<span class="mw-page-title-main">Windows Live Messenger</span> Deprecated instant messaging client

MSN Messenger, later rebranded as Windows Live Messenger, was a cross-platform instant-messaging client developed by Microsoft. It connected to the now-discontinued Microsoft Messenger service and, in later versions, was compatible with Yahoo! Messenger and Facebook Messenger. The service was discontinued in 2013 and was replaced by Skype.

Forum spam consists of posts on Internet forums that contains related or unrelated advertisements, links to malicious websites, trolling and abusive or otherwise unwanted information. Forum spam is usually posted onto message boards by automated spambots or manually with unscrupulous intentions with intent to get the spam in front of readers who would not otherwise have anything to do with it intentionally.

Kik Messenger, commonly called Kik, is a freeware instant messaging mobile app from the Canadian company Kik Interactive, available on iOS and Android operating systems.

Social spam is unwanted spam content appearing on social networking services, social bookmarking sites, and any website with user-generated content. It can be manifested in many ways, including bulk messages, profanity, insults, hate speech, malicious links, fraudulent reviews, fake friends, and personally identifiable information.

Slenfbot is the classification for a family of malicious software (malware), which infects files on Microsoft Windows systems. Slenfbot was first discovered in 2007 and, since then, numerous variants have followed; each with slightly different characteristics and new additions to the worm's payload, such as the ability to provide the attacker with unauthorized access to the compromised host. Slenfbot primarily spreads by luring users to follow links to websites, which contain a malicious payload. Slenfbot propagates via instant messaging applications, removable drives and/or the local network via network shares. The code for Slenfbot appears to be closely managed, which may provide attribution to a single group and/or indicate that a large portion of the code is shared amongst multiple groups. The inclusion of other malware families and variants as well as its own continuous evolution, makes Slenfbot a highly effective downloader with a propensity to cause even more damage to compromised systems.

Comparison of user features of messaging platforms refers to a comparison of all the various user features of various electronic instant messaging platforms. This includes a wide variety of resources; it includes standalone apps, platforms within websites, computer software, and various internal functions available on specific devices, such as iMessage for iPhones.

References

  1. "CNET: Spim, splog on the rise". News.com. Retrieved 2013-07-07.
  2. "Spam being rapidly outpaced by spim". New Scientist. 2004-03-26. Retrieved 2013-07-07.
  3. Spamfo: SPIM, your new spam Archived October 21, 2007, at the Wayback Machine
  4. Agarwal, Shubham. "Scientists found more than 1,000 AI spam bots trying to scam people and steal their social media profiles — and regulators can't keep up". Business Insider. Retrieved 2023-10-17.
  5. Kurt Knutsson, CyberGuy Report (2023-09-22). "How to protect yourself from social media scammers". Fox News. Retrieved 2023-10-17.
  6. "Tired of spam calls? Block promotional calls in some easy steps on Android, iOS phones". The Economic Times. 2023-06-02. ISSN   0013-0389 . Retrieved 2023-10-17.
  7. "Porn Spam Gets a Kik Out of You". Tom's Guide. 2014-06-05. Retrieved 2017-08-18.
  8. "Messenger Service window that contains an Internet advertisement appears". Microsoft. Retrieved 2023-12-01.
  9. Li, Fangtao, et al. "Learning to identify review spam." IJCAI Proceedings-International Joint Conference on Artificial Intelligence. Vol. 22. No. 3. 2011.
  10. O'Callaghan, Derek, et al. "Network analysis of recurring YouTube spam campaigns." arXiv preprint arXiv:1201.3783 (2012).