Endpoint Protection

After contributing 30 - 50% of URL spam in 2009, the volume of .cn spam is on the decline. It appears that the drop is due to the recent enhancement in domain registration procedures introduced by China's Internet Network Information Center (CNNIC). On December 11, CNNIC announced a new registration procedure for .cn domains.

 

Data gathered in the Symantec Probe Network shows that the volume of .cn spam fluctuated around 40% until December 11. After a sudden spike in the volume on December 13, the .cn spam volume plunged to around 20%.

 

 

.CN domains are mostly exploited by Canadian Pharmacy spammers to host online meds sites. The most common subject lines in .cn spam campaign are: