A copycat spam gang has launched an effort to compromise PCs that rivals the botnet created by the infamous Storm Worm Gang.

The botnet established by the Celebrity Spam Gang, so-named for a habit of using celebrity names in malware, is currently responsible for 20 per cent of junk mails in circulation, according to net security firm Marshal.

All this is fairly standard stuff, yet the gang has enjoyed considerable success.

"It is a concern to us that so many computer users are still being taken in by what we would consider to be an obvious subterfuge as 'check out this nude Britney Spears game'. The Storm Gang has been more inventive with their campaigns and exploited everything from news headlines to greeting cards. There is clearly a need for renewed awareness and education," said Bradley Anstis, VP of products at Marshal.

The Celebrity Spam Gang is following the Storm Gang's template of spamming out malware in order to expand its botnet, in turn building the capacity to generate greater numbers of junk mail messages.

The scale of the gang's activities only became apparent after security researchers at Marshal deliberately infected a machine, turning it into a zombie client of the Celebrity Spam Gang.

"We deliberately infected a test computer with the Celebrity Gang botnet and then closely monitored its behaviour and the make-up of spam it was instructed to send by the spammers," Anstis explained. "We were able to match this spam against 23 per cent of all spam we saw in circulation for the previous month."

Although the Celebrity Spam Gang had been on Marshal's radar for some time, the volume of junk mail it was responsible for came as a surprise to security researchers.

Marshal recommends PC users do not open executable files attached to email messages from addresses they do not recognise or trust and to "refrain from opening any message that purports to feature nude celebrities".

Obvious advice, perhaps, but something a small minority of surfers are ignoring, to the detriment of the internet as a whole. ®

Related stories

• Storm Worms exploit April Fools (1 April 2008)
• Storm Worm turns one (18 January 2008)
• New Year's Eve greetings disguise Storm Worm attacks (27 December 2007)
• Miscreants subvert search results to punt malware (28 November 2007)
• Trick or trojan - watch out for Halloween malware (31 October 2007)
• Storm Worm retaliates against security researchers (25 October 2007)
• The balkanization of Storm Worm botnets (15 October 2007)
• Storm Worm linked to spam surge (14 September 2007)
• ISPs turn blind eye to million-machine malware monster (10 September 2007)
• Storm Worm of a thousand faces (21 August 2007)
• Storm worm authors switch tactics (20 August 2007)
• Universities warned of Storm Worm attacks (17 August 2007)
• Fast flux foils botnet takedown (11 July 2007)
• Rival malware gangs wage turf war (1 July 2007)
• Imperfect Storm aids spammers (19 February 2007)
• Anatomy sheds new light on Storm Worm (9 February 2007)