McAfee says global email spam volumes have dropped 20% for the first quarter this year compared with the same period in 2008.
McAfee attributes the dramatic reduction in email spam to the November shutdown of the McColo spam-generating site. In the McAfee Threat Report for the First Quarter 2009, published on Tuesday, the security firm said spam levels are still 30% below their peak seen in the third quarter of last year right before the shutdown of the rogue ISP McColo.
Spam as a total percentage of email volume is now at 86% - hardly great news, but 90% had been the more common figure and current levels haven't been this low since 2006, according to McAfee. All email, both good and bad combined, is believed to have averaged about 100 billion messages per day worldwide in March, a trend continuing into April, notes Dave Marcus, McAfee director of communications.
However, McAfee is not optimistic that email spam volumes will continue to drop as they have done in the first quarter. "The question is not whether spam will return to previous levels but rather when it will return," McAfee says in its report.
The United States remains the top country whose computers - many of them compromised - generate the most spam worldwide. "The US continues to lead the world with 35% of the glove's spam output," McAfee states.
But in other nations there's also trouble, McAfee points out, asserting that criminals have been attacking Russian banking and government networks in order to use computer resources within them to generate malware-laden email and spam.
McAfee cites Rusfinance Bank, OGO Bank, Tusarbank, Link Capital Investment Bank, Maritime Bank, Vladivostok Alfa Bank, Bank Voronezh and Inter-Svayz Bank as being among the Russian financial institutions inadvertently generating spam.
"This data suggests online criminals are largely indiscriminate about their targets and will attack any organisation of financial or other interest to them," McAfee states.
The McAfee report also adds, "Our data suggests that computer systems in the following Russian government offices are controlled by cybergangs." These institutions would include the Ministry of Taxation, Nazran Region; the Russian State Internet Network; Regional Finance and Economy Institute; Joint Institute for Nuclear Research; and Pension Fund of the Russian Federation, among several others.
Marcus says McAfee has notified these institutions of its findings, which were recently made as the security firm combed through information it was collecting about spam and IP addresses.
When it comes to malicious web activity from sites with "bad reputations" for hosting malware, the top three countries remain the United States, China and Russia. But this last quarter saw growth in malicious Web activity from sites in the Netherlands, United Kingdom, Republic of Korea, Japan, France, Canada and Czech Republic, the McAfee report concludes.