Windows Live SkyDrive Used For Spam-Related Hosting - InformationWeek
Software // Information Management
07:27 PM
Connect Directly
How Cloud Can Streamline Business Workflow
Jul 11, 2017
In order to optimize your utilization of cloud computing, you need to be able to deliver reliable ...Read More>>

Windows Live SkyDrive Used For Spam-Related Hosting

The spammers appear to be uploading single-line HTML files that redirect Web visitors to a Web site used to sell spam-promoted products.

Windows Live SkyDrive Beta, Microsoft's free online storage and file sharing service, appears to be taking off... with spammers.

McAfee security researcher Chris Barton on Tuesday reported, "Our labs trapped many thousands of spam overnight that are abusing the Windows Live SkyDrive Beta service..."

Windows Live SkyDrive Beta is part of Microsoft's Windows Live portfolio of services. It was launched last August under the name Windows Live Folders and later re-branded. In October, the service was updated and it now offers users 1 Gbyte of free online storage.

The spammers appear to be uploading single-line HTML files that redirect Web visitors to a Web site used to sell spam-promoted products, such as pills of dubious value and function.

There are two main advantages to this approach, which is similar to adding spam links to "splogs," as spam-saturated blogs have come to be known. First, Microsoft's domain is unlikely to be blacklisted. And second, there's no hosting cost.

"We've seen a few small scale spam using the SkyDrive service dating back to November last year but [those] were on an much smaller scale to last night's campaign," observed Barton. "I'm sure it won't be too long before it's used to host other unwelcome content types."

Barton suggests that online storage services should make more of an effort to scan for malware.

Windows Live SkyDrive specifically prohibits use of the service that "intends to harm or disrupt another user's computer or would allow others to illegally access software or bypass security on Web sites, or servers, including but not limited to spamming."

Barton characterizes Microsoft's Code of Conduct for the service as "pretty good," but it's not clear from that wording of the prohibited uses whether spamming that intends to sell, rather than harm or disrupt, will be tolerated.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
IT Strategies to Conquer the Cloud
Chances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on for the week of November 6, 2016. We'll be talking with the editors and correspondents who brought you the top stories of the week to get the "story behind the story."
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll