Snowshoe spamming is a technique where spammers use multiple IP addresses to distribute spam, making it difficult to identify and trap. The use of different domains and servers further distributes the spam load. Legitimate email providers use a narrow range of IP addresses, while Snowshoe spammers hide behind layers of anonymity. Anti-spam efforts target specific domain hosts and registrars to take down spam sites or tighten terms of service.
Snowshoe spamming is a spamming technique where the spammer uses a wide range of IP addresses to distribute the spam load. The widespread use of IP addresses makes it difficult to identify and trap spam, allowing at least some of it to reach e-mail inboxes. For companies that specialize in trapping spam, Snowshoe spam is especially bad because it’s difficult to trap with traditional spam filters.
Snowshoeing is actually an excellent analogy to describe this spamming technique. Snowshoes are designed to distribute heavy weight over a large area so that the wearer does not break crusts of snow and ice, and spamming with snowshoes distributes a large spam load across a wide range of addresses IP in much the same way. Like all spammers, Snowshoe spammers expect some of their unwanted email to be trapped by spam filters. Snowshoe spamming gives multiple emails a chance to reach one inbox, where it can reach a computer user.
Setting up a Snowshoe spamming operation requires some resources and knowledge, as the spammer must have access to a set of IP addresses. Snowshoe spammers typically use an assortment of domains, which can be connected to different servers and providers to further distribute the spam load. In a sample of emails sent by a Snowshoe spammer, repeated IP addresses are quite rare, meaning filters need to focus on the content, rather than the sender, to trap spam.
Legitimate email service providers use a very narrow range of IP addresses for sending email. This is generally seen as a sign of integrity, as is the use of clear disclosure about who owns the originating domain. Conversely, Snowshoe spamming often involves domains hidden behind layers of anonymity, making it difficult to trace the owner and report abuse. Especially in countries with anti-spam legislation, tracking down the parties responsible for spam, spyware, and other malicious activity can be extremely difficult, because authors are good at covering their tracks.
Several anti-spam efforts have focused on targeting specific domain hosts and registrars. Some registrars are notorious for harboring spammers, and by identifying large numbers of spam sites in their customer lists, anti-spam advocates hope to either take those sites down or humiliate the registrar to tighten up their terms of service. Snowshoe spam sometimes exposes a systemic problem with a particular host, as anti-spam advocates realize that large amounts of spam come from domains managed by the same company.
Protect your devices with Threat Protection by NordVPN
