From the “Hate to Say I Told You So” department…
As they say, all things come to an end and, as expected, the unusual lull in spamming activity between Christmas and the new year seems to have come to an end early today.
As if spam has returned to work from a long holiday break, volumes have been sharply rising to levels similar to those observed before the 12/25/10 “vacation.”
Hourly spam volume has roughly doubled from the spam baseline observed over the holidays and is also back to showing the usual “spikey” behavior we see from spam campaigns. My friends over in the Proofpoint Attack Response Center confirm with me that this is “a resumption of previously seen traffic patterns.” There’s roughly 3 times the amount of messages hitting that account today as last week.
The messages here still seem pretty heavy on pharma spam, but there are a few items that are possible phish, also a larger number of Asian language messages.
Not too much else to say about this right now except that it really does look like one (or maybe several) of the top spam senders took a holiday vacation and are now back at it in the second week of the new year.
While other botnets may have taken a hiatus as well, it does seem that the Rustock botnet is back to its spam-sending ways (as reported by The Guardian).