We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Dropbox's URL shortener abused by spammers

Symantec finds the popular file-sharing application is now being abused by spammers

Spammers are abusing a Dropbox feature that lets users share a shortened link, directing people to websites selling questionable pharmaceuticals, according to security vendor Symantec.

Dropbox, the file-sharing and synchronization service, has a public folder that is dedicated to sharing content. Dropbox's URL (uniform resource locator) shortening service can be used to create links to content in that public folder.

Spammers have seized on this and are creating shortened links to images stored in the public folder. The images contain a link to online pharmaceutical retailers, wrote Nick Johnston, a senior software engineer at Symantec.

"We saw over 1,200 unique Dropbox URLs being used in spam over a 48-hour period," Johnston wrote. "We have informed Dropbox, providing them with the full list of URLs."

Spammers have often abused URL shortening services. The services are advantageous to spammers since people can't immediately tell where the shortened link will take them.

Twitter introduced its own shortening service, but as a security measure resolves the link to see if it has been reported as malicious. Twitter's URL shortener will also display the target link if users hover the mouse pointer over the shortened link to give users a better idea of where they are going.

But spammers are a creative bunch, and lately they've also been using open-source software to create their own shortening services.

Symantec has noticed at least one other way Dropbox has been abused. A Brazilian malware campaign with spam messages in Portuguese included links to image files hosted on Dropbox, Johnston wrote. The files weren't images, though, but malicious software.

Dropbox couldn't immediately be reached for comment.

Send news tips and comments to [email protected]


IDG UK Sites

Best Black Friday 2014 tech deals: Get bargains on smartphones, tablets, laptops and more

IDG UK Sites

What the Internet of Things will look like in 2015: homes will get smarter, people might get fitter

IDG UK Sites

See how Trunk's animated ad helped Ade Edmondson plug The Car Buying Service

IDG UK Sites

Yosemite tips: Complete Guide to OS X Yosemite