The Rising Tides of Spam
Summary: Cisco Talos reports that spam volumes in 2016 climbed back to levels last seen in mid-2010, with the SpamCop Block List growing from under 200K IP addresses before 2016 to an average near 400K and a spike above 450K in August. The Necurs botnet returned weeks after June 2016 arrests in Russia silenced it, switching from Russian dating and stock spam to attachment-based spam carrying Dridex or Locky.
What you should know: Necurs keeps infected hosts for more than two years and sends from only a subset at a time, using a host for two to three days and then leaving it idle for two to three weeks - so a host your team believes was cleaned can start spamming again without warning.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026