McAfee security researcher Chris Barton on Tuesday reported, "Our labs trapped many thousands of spam overnight that are abusing the Windows Live SkyDrive Beta service..."
The spammers appear to be uploading single-line HTML files that redirect Web visitors to a Web site used to sell spam-promoted products, such as pills of dubious value and function.
There are two main advantages to this approach, which is similar to adding spam links to "splogs," as spam-saturated blogs have come to be known. First, Microsoft's domain is unlikely to be blacklisted. And second, there's no hosting cost.
"We've seen a few small scale spam using the SkyDrive service dating back to November last year but [those] were on an much smaller scale to last night's campaign," observed Barton. "I'm sure it won't be too long before it's used to host other unwelcome content types."
Barton suggests that online storage services should make more of an effort to scan for malware.
Windows Live SkyDrive specifically prohibits use of the service that "intends to harm or disrupt another user's computer or would allow others to illegally access software or bypass security on Web sites, or servers, including but not limited to spamming."
Barton characterizes Microsoft's Code of Conduct for the service as "pretty good," but it's not clear from that wording of the prohibited uses whether spamming that intends to sell, rather than harm or disrupt, will be tolerated.
Stay connected and informed by visiting the CA Solutions Center Community!

Become a member today for instant access to free InformationWeek research, expert advice, peer perspectives, and more on the following topics:
- Application Performance Management (APM)
- Security Management
- Mainframe 2.0
- IT Automation
- Service Assurance
Also, visit our Government and Financial Services groups to see how these technologies apply specifically to those industries.
NOTE: Offer valid for U.S., U.S. possessions, & Canada only.