Top 5 Techniques to Protect Yourself From Spam

Top 5 Techniques to Protect Yourself From Spam

It is virtually impossible to avoid having your email address end up on a spammer's mailing list. You can, however, take steps to minimize the amount of spam that you receive. Here are to top five:

Address Munging

Never, ever post your permanent email address publicly online. Posting it on a website, on USENET, or in a guest book, for example, virtually guarantees that it will end up on a spammer's emailing list.
 
If you absolutely have to supply an address, or regularly participate in online forums but do not want further communication, camouflage your address in some way. You can, for example, disguise your address by writing it in such a way that humans can read it, but the spammers automated programs cannot.

Example: instead of JaneDoe@ISP.com, add a blank space before and after the "@" sign, or use characters e.g. JaneDoe at ISP dot com.

This is called  "address munging". While address munging does not allow for a regular, clickable email link, anyone who really wants to contact you will figure it out the proper address. 

If you have a website, provide a feedback form instead of giving your email address.

Sign up for an Alternative Email Addresses

Do not use your primary email address when placing an online order, getting a free download, or want to sign up for a newsletter or free service Get a secondary email address that you can use in these instances. You can open a free email account for this purpose. Email providers such as GMail and yahoo offer this free email service.

Reserve this email address specifically for this online activity - do not offer it to people from whom you want to receive email, as this will likely be lost in the deluge of junk mail.

Also, be sure to log into this account on a regular basis to delete the junk mail and avoid having the account closed. If you get over-spammed, just close this account and open a new one.

Choose an email address that cannot be easily guessed at. One method used by spammers to get email address is to generate a list of likely email addresses based on a combination of first names, last names and commonly used words. They may, for example build an emailing list that has variations of an address like JoelDoe1@hotmail.com, JoelDoe2@hotmail.com etc.
You can foil this spammer's tactic by using a relatively long email address, for example 8 or more characters long. You should also avoid choosing email addresses that include either of your names. Use your initials instead, in combination with numbers, e.g. jtd1509@yahoo.com.

Beware the Phisher Spam

Phishing is a tactic used by spammers to scam you into giving up vital personal and financial information. Its sole purpose is identity theft.

Never divulge any personal or financial information that is requested in an email. Your bank or credit card company would never ask you to confirm or update your personal information via an email or a link in an email. Any such emails should be reported to the bank or credit card company. Never, ever click on any links in this type of spam.

Get a spam filter or spam blocker

Stop the spam dead in its tracks before it ever makes it into your inbox. Well, most of it at least. Though they are not 100% effective, anti-spam software will keep most of it out. Even if you only use the internet a spam filter will help protect you from spam.

The Next Generation of Spam: Image and PDF Spam

As spam filters get increasingly effective, spammers are changing their tactics to foil anti-spam software and get through to your inbox. Recently, this has involved a shift from the use of text-based spam to the use of embedded images and PDF file attachments as the preffered delivery method for their spammy intrusions.

Image Spam

The prevalence of this form of spam increased in 2006, primarily as a means for advertising penny stocks. It involved the use of a picture or graphic embedded in the body of the junk email. The junk email's message is displayed as an image.

Because most anti-spam filters are text-based, image spam was relatively successful. This led to its use in advertising everything from sexual enhancement to fake pharmaceuticals.

One serious effect of image spam has had is to further clog up Internet bandwidth, and drive up costs to businesses. This is because the average size of each junk email almost doubled. In fact, this increased size and the sheer volume of image spam forced many businesses to block all emails that contained embedded or attached images.

By early 2007, image spam reached an all-time high, accounting for almost two-thirds of all junk email. However, as spam filter technology has adapted to detect image spam, its use has since declined to less than 15% of all junk email. Instead, spammers are turning to PDF spam
  
PDF Spam

Spammers are increasingly using PDF files to bear their spam messages. The practice begun in mid-2007, primarily as a scam to fool recipients into investing their money in the stock of a particular company.

With this type of spam, the junk email is sent out with a PDF file attachment, which most anti-spam filters cannot or do not read. These attachments range from rudimentary to professional-looking documents. The text in the body of the email is usually nonsensical gobbledygook that the spam-filter does not recognize as junk mail.

For the spammer, the use of PDF files is advantageous because PDF files are so commonly used in the business world. In fact, several companies allow or even require their business email systems to deliver these documents to the recipient. This makes it very likely that this PDF spam will reach the user's inbox.

The use of junk mail with PDF attachments takes up even more Internet bandwidth. This is because PDF files are generally much larger than the embedded pictures and graphics used in image spam. Image spam is typically in GIF format; PDF files are upto 3 times the size of these files.

The upside to the use of image and PDF spam is that so far, there is no hard evidence that either one can be used to embed malicious software on the recipient's computer. The only harm is done to those who do what the message says. Spammers have also begun to experiment with attachments in different file types such as excel and zip files.

The advent and decline of the different types of spam attest to the cat-and-mouse game that goes on between the spammers and the security experts. As anti-spam technology catches up to their techniques, they continue to innovate and change tactics to deliver their spam messages.

How Spammers Get Your Email Address

How Spammers Get Your Email Address

Each minute of each day, there are literally thousands upon thousands of spam email messages flooding in boxes the world over. Some of that email even goes out from what appears to be your very own email address! Where on earth do spammers get your email address? There are various ways - some are legitimate, and most are not.
Typically, spammers will "harvest" email addresses from legitimate web sites, such as USENET groups, chat rooms, message boards, AOL profile pages and special interest group postings. These are sites you have visited and requested more information from, or corporate sites where you may have placed an order.

The spammers collect these addresses using automated programs called spam bots. Spam bots are designed to harvest the email addresses from these web sites. They scan every page on the site, collecting any text containing the symbol "@" they find. The email addresses they collect are compiled into a database, loaded into a bulk-emailing program and out goes the spam. Often, these harvested email addresses are also sold to other spammers ; once you email address makes it to a spammer's mailing list, it will make it onto their fellow spammer's lists.

Some websites require you to register before you can place an order or access certain parts of the site. Not all these websites will be as protective of your email address as you may wish. Newsgroups are particularly notorious for exposing their users' email addresses to the spam gatherers. Most newsgroups do not take a great deal of care to hide the email of their users, and each and every email member email address is exposed and up for grabs by spammers. Some of the websites that ask you to register may also sell to spammers.

Another method commonly used by the spammers is to target a domain. They simply guess or make up every possible variation of email address based on the domain name, for example @yourDomain.com . They create a mailing list of these addresses and then spam them. Corporate emails are especially vulnerable, as their emails have a distinct format such as @BusinessName.com.

While most of the spam will bounce, it really does not bother the spammers because they can and do send out millions of this type of junk mail a day. A small proportion of the emails will actually be legitimate and will receive the spam - that is good enough for the spammer. This method of gathering email addresses is called a brute force spam attack.

One way to defend against this is to make it more difficult for the spider to harvest your email. When you place your email address on a web site, remove the @ symbol and replace it with the word "at." This makes it far more difficult for the spam harvester to gather your address, because it cannot be gathered mechanically; it can only by read by a human who is actually reading the site. Alternatively, you should display your email address as an image rather than as text.