'Donbot' launches pump-and-dump run

A massive botnet credited with launching an attack on Twitter and Facebook last month has moved into running "pump and dump" spam attacks.

The "Donbot" botnet has recently been connected by researchers to a rash of stock-related spam messages. Known as "pump and dump" spam, the messages attempt to convince users to invest in a low-priced stock. Once the demand for the stock has inflated its price, the spammer then sells the stock for a profit.

Researchers at Message Labs say that the attack is unique because pump and dump scams, once a common occurrence, have all but disappeared in recent years. Much of the drop was attributed to the arrest and conviction of spam kingpin Alan Ralsky.

With the changes believed to be taking place in the cybercrime world, however, such attacks could soon return to favour. Experts throughout the industry have predicted that an increasingly crowded and competitive market could force criminals to look for new ways to make money online.

The size and structure of new botnets may also play apart. MessageLabs senior analyst Paul Wood noted that stock spam operations were perfect for Donbot and other large botnets.

“The people behind the scam will have already purchased their stock and when the stock price rises, the sell it and make a big profit," said Wood.

"This technique is perfectly suited to botnet activity as it requires large volumes of mail to be sent at one time."