|
- 29A Labs - 29A Headquarters.
- antivir.de - German virii related information and downloads.
- BCVG Network - Providing free information on network security, viruses, daily news etc.
- BigFix - A free utility, which claims to fix bugs and viruses before they occur.
- BitDefender (AVX- Antivirus eXpert) Global Website - Complete security solutions to protect your network and desktop computer from latest viruses or security loopholes.
- DiamondCS ScriptGuard - The system to eliminate the threat of Hostile Microsoft Script based worms such as the ILOVEYOU worm.
- Hacking and Research Virus Group - A site completely dedicated to hacking and virus content. A large virus archive with binary samples, source codes, Polymorphic engines, virus generating tools etc...
- Helith Network VX Zone - A cooperation between international VX researchers supported by Helith Network
- IDABlocker, CodeRed Log File Blocker - CodeRed is a problem for all system administrators and webmasters, not just those using IIS. Crucial time and money is wasted even if the response is just a 404. ncIDABlocker is an ISAPI DLL that automatically processes and drops requests from offending CodeRed servers.
- mr-virus.cc - german site about virii and trojans
- Newjoiner - Newjoiner is a modification by stoner of Blade's Joiner to avoid av detection.
- Rott_En's Virus Lab - The webpage of Rott_En, Helith Network member and VX researcher.
- Rott_En\'s Virus Labs - Malware researching and code examples of many concepts.
- Russian Backdoors - Full descriptions of all backdoors created in ex-USSR.
- SinRed - trojan info, downloads and cleaners
- SINRED . COMmunity - Remote Administration Community (Trojans community)
- Supravom - Meta Informatic Syndrome Patients (MISP). A small computer virus research and development group.
- Symantec - Information database of pretty much all viruses, how they work and how to remove them.
- TDS-2 - Anti-Trojan software for windows.
- Trend Micro - Antiviral software, scan engines, patches, whitepapers.
- Virii online testing - The list of online virii checkers and links to Antiviral software.
- virus website - This site is the center of virii/worm coding. Hosted by Friday 13th Labs (F-13 Labs)
- Virusy.sk - Slovakian web site about virii
- VX Heavens - Virus archive. Information, magazines, generators, engines, texts, articles, tutorials, links, virus sources, simulators and binaries. This site is kept up to date.
Threat Resources (McAfee)
Resources
Top 25 Countries Where Spam Servers Are Located (Project Honey Pot Statistics). Can be drilled down to the IP address - level (click on a flag icon).
#1 China (19.0%)
#2 United States (14.5%)
#3 Korea (6.8%)
#4 Germany (5.5%)
#5 Brazil (4.7%)
#6 Poland (4.6%)
#7 France (4.0%)
#8 Italy (3.9%)
#9 Spain (3.7%)
#10 India (3.1%)
#11 United Kingdom (2.9%)
#12 Taiwan (2.2%)
|
#13 Japan (2.2%)
#14 Russian Federation (2.2%)
#15 Turkey (2.1%)
#16 Israel (1.4%)
#17 Netherlands (1.0%)
#18 Thailand (1.0%)
#19 Canada (1.0%)
#20 Argentina (1.0%)
#21 Chile (0.9%)
#22 Egypt (0.9%)
#23 Malaysia (0.9%)
#24 Vietnam (0.8%)
#25 Romania (0.7%) |
|
|
1. Snopes- This is the grand-daddy of all fact-checking sites. Some of the worst chain spams even quote Snopes with an embedded link to give their e-mail an added level of authenticity. Of course, Snopes has been known to be wrong and has changed their listings on several occasions. They've also become very commercialized and include lots of pop-ups over the years - very annoying - but it is a very complete site.
2. About Urban Legends- This about.com subsite has been hosted for ten years by David Emery and frankly, he has done a great job. He is passionate about finding and debunking all those rumors, myths, pranks and odd stories. I have found lately that I am referring more people to his site than Snopes because I like the format better. The site also shows up in more Google searches than the others indicating that the content is well linked and used.
3. Break The Chain- In 1999, John Ratliff was annoyed that he kept receiving the same chain spams forwarded to him over and over. I have been just as annoyed for just as long but he did something about it. Like most of these sites, John has plenty of healthy advertisements but no pop-ups. His site is getting more professional looking all the time. He is also frequently cited by the media when looking for an authoritative source on these stupid chain mails.
4. Hoaxbusters- The site has been around a long time (since 1995) and has a good archive but doesn’t seem to be as current as it once was. It is a part of the US Department of Energy - Computer Incident Advisory Capacity (CAIC). Chances are that if you cannot find details of a hoax on one of the other sites, you may be able to find it here. Because it has been around so long there are some dead links. Hoaxbusters also contains a page of links to other hoax sites.
5. Sophos - This anti-virus company keeps a small list of hoaxes and urban legends but it is not nearly as complete as the sites at the top of this list. Their focus is more on virus hoaxes - like screaming that you will wipe your hard drive and melt the motherboard if you open the suspect e-mail.
6. F-Secure- They claim that their list is comprehensive and the industry standard source for all things hoax related. Quite outdates, however, it is still a good list to search if you don't find what you're looking for elsewhere.
7. VMyths- Well referenced by specialists in the computer security field, VMyths takes Internet hoaxes and chain letters to a new level. If you want to read what the real experts have to say about Internet hoaxes, virus scares, myths and legends. Unfortunately, their lists are not comprehensive.
8. Symantec
9. Trend Micro - They have improved their list lately with some good updates. I like their style and formatting. Obviously a company that sells AV solutions has a vested interest in keeping their hoax list up to date. Check out their complete list of urban legends.
10. Virus Busters - A short list from the University of Michigan of hoaxes and legends that keep coming back.
11. Bill Gates' desire to send you big bucks for forwarding chain letters.
|
Spam is an escalating problem. According to a two-years old Harris
Interactive poll, more than 40 percent of all email is spam, up from
just 13 percent a year earlier. By the end of last year, spam was
account for more than 85% (!) of all email; some enterprises are
reporting that spam is already more than 90 percent of their incoming
email. In America, almost half of all spam received comes from
overseas. Most alarmingly, spam is evolving from a nuisance to a
business threat, with volume email creating a Denial of Service
(DoS)-style attack, bringing email servers to their virtual knees.
|
General Anti-Spam Best Practice
Outbound Spam Filtering Overviews
Outbound Throttling or Egress Filtering allows you to mitigate the impact of a spammer or worm infection on your network by reducing the ill effects before your abuse reponse can take effect.
Outbound Spam Filtering Products
- National DO-NOT-CALL Registry (USA phones). The Registry gives you a choice about whether to receive telemarketing calls at home.
- ConsumerSentinel - get the facts on consumer frauds from Internet cons, prize promotions, work-at-home schemes, and telemarketing scams to identity theft.
Report your fraud complaints so they can be shared with law enforcement officials across the U. S. and around the world.
- FTC Consumer Complaint Form - submit a complaint to the Federal Trade Commission (FTC) Bureau of Consumer Protection about a particular company or organization. Also may be used to submit a complaint to the FTC concerning media violence.
- eConsumer.gov Complaint Form -consumer complaint database maintained by the U. S. Federal Trade Commission. Complaints entered into our law enforcement database will be made available to certified government law enforcement agencies in participating countries.
- antispam.msexchange.org -the latest anti-spam news, white papers and equipment.
- SpamPrimer.com -Help with Spam and Phishing
- SpamLion - fully featured, Win2K server-based, anti-spam solution with a Patent-pending "White List" technology to stop 100% of the Unsolicited Commercial E-mail
- MIT Spam Conference 2007
- Unwantedlinks.com/protectemail
- The Art of Spam-Hunting -FAQs and other resources
- Abuze.net Network Abuse Clearinghouse
- Spamlaws.com
- The website that tests your SMTP server for open relay functionality
- Semi-automated abuse reporting tools - Some tools to help figure out where a message came from and send complaints.
- Julian Haight's very popular Spam Cop - a web-based system that attempts to diagnose where an unwanted message came from and send off complaints (not always reports correctly).
- Spam Assassin -runs on Unix and Unix-like systems, uses a scoring system to identify spam.
- For Unix shell users, here is a Perl script called
mspam to create a complaint message.
- Bill McFadden's automated spam complaint tool for Unix shell users at
www.rdrop.com/users/billmc/.
- www.laas.fr/~felix/despam
- The spam tools mailing list Abuse.net hosts a mailing list for people interested in developing and deploying anti-spam tools.
- Ricochet - a perl script for Unix and Linux systems that attempts to guess the source of a spam message from the headers. It can be fooled by forged headers, and rather aggressive about digging up WHOIS info to contact tenuously related contacts. It keeps its own list of contacts, and uses abuse.net for any not in the list.
- PCHelp's Network Tracer - a combination of a batch script and a couple of freeware command level tools for Windows that help track down IP addresses, URLs, hostnames, and e-mail addresses.
- Vipul's Razor - An open-source distributed filtering system, it collects 'signatures' of spam from users, and distributes them back out to use for filtering.
- Intrusion Detection and Prevention Resources. A place to report intrusion attempts, exploits, hacks and port scans. Has a large list of software/hardware protection, and one of the largest trojan port/exploit port databases online.
- Server-based Anti Spam tool - GFI MailEssentials for Exchange/SMTP
- The Responsible Net Commerce Site
- Stop Spammers Manual
- McAfee SmapKiller
- iHateSpam Software
- and.doxdesk.com Helps you to find unsolicited commercial software.
- SpyBot software (free)
- SpamKiller
- Blockallspam.net
- The Spam Inspector 4.0 ($)
- popUpProtect -Internet Filtering for Business
- Mailscanner.biz -open source e-mail security system
- "How to block over 98% of spam using Bayesian filtering" - white paper from GFI about adaptive, "statistical intelligence" technique.
- SpamBayes from Sourceforge.net
- SoftwareSecuritySolutions.com- Pop Up Blockers, Spam Filters

Acceptable Use Policies
An effective acceptable use policy can help to deter spammers. It can be an essential tool in cutting off the account of a spammer who is operating from your ISP.
Abuse Desk Specific Products
General Helpdesk Products
Mail Provider Complaint Feedback Systems
Port 25 Blocking
The Identity Theft Self-Protection Kit
|