Spammers using MP3 files to slip past sophisticated filters

SAN JOSE, Calif. - Spam is now being served in audio form. The latest in unwanted electronic communication is an MP3 file that began landing in inboxes around the world in mid-October. It features a spooky, synthesized Darth-Vader-sounding female voice touting the stock of Exit Only Inc., traded on the lower-standard Pink Sheets.

"Hello, this is an investor alert!" the halting, at times unintelligible voice says. Her pitch invokes the growth prospects of Exit Only, a Web site operator that runs Text4Cars. com, which links auto buyers and sellers via text messages.

Computer security researchers say the audio blasts - MP3 files with misleading names attached to spam e-mails - reflect spammers' need to slip their messages through increasingly sophisticated e-mail filters.

The MP3s masquerade as cell phone ringtones or carry names like "bartsimpson.mp3" and "justintimberlake.mp3," said Keith Crosley, director of market development for Proofpoint Inc., which sells e-mail security software and hardware.

Spammers have had to change tactics as the filters have gotten smarter at blocking traditional text-based spam, spam sent as image attachments - such as GIFs or JPEGs - and even the latest rage, spam hidden inside attachments created with Adobe Systems Inc.'s ubiquitous Portable Document Format, or PDF.

Santa Monica, Calif.-based Exit Only said the e-mails are being sent by someone trying to pump up the company's stock before dumping it.

Business, Pages 25 on 10/29/2007

Upcoming Events