Spam Propagation Finding Considerations

When classifying observations as Spam Propagation events, spambots are identified based on known patterns contained in the email headers that are common across malware families, such as the subject field, the “Received From” field, email addresses, and various IDs.

Example

One type of observed spam mechanisms are spambots. Spambots are used for simultaneously sending bulk email messages from multiple devices.