Home / Blogs

Robert Soloway Pleads Guilty

John Levine

Large scale spammer Robert Soloway, whose criminal trial was scheduled to start in a week and a half pled guilty to most of the charges against him.

The indictment (actually the third indictment, since each time Soloway asked for a postponement, the government got to refile with more charges) made three categories of charges. Counts 1-10 were mail fraud, due to Soloway delivering his spamware through the mail, and the product egregiously failing to be what he said it was, notably including 30 million addresses purported to be opt-in. Counts 11-17 seven were wire fraud, sending spam making false claims about the product, support, guarantee, etc. Count 18 was CAN SPAM fraud, forged mail headers. Counts 19-25 were identity theft, sending spam forging other people's return addresses. Counts 26-27 were for failure to file income taxes, and 28-40 were money laundering, using his ill gotten income (see counts 1-17) to pay for further lawbreaking, e.g., server hosting and rent for his activitites. All in all, it was quite a comprehensive indictment, most of which was not depending on CAN SPAM.

I have not yet seen the plea bargain, but according to news reports he pled guilty to wire fraud, CAN SPAM fraud, and tax evasion, but not identity theft which was dismissed. This is a thorough victory for the government, although it's a shame to lose the identity theft charges. Spammers routinely forge return addresses in spam, often picking addresses at random from their spam lists. This causes problems indirectly for the forgery victims, when recipients assume the From: address in the spam is the guilty party, and directly because a lot of spam is sent to invalid addresses which cause non-delivery reports to be sent back to the forged address. We call this blowback, and it is not an insignificant problem. I run a service called abuse.net which some eastern European spammers often use in forged return addresses, and I have gotten up to 400,000 bounces per day from forged spam, even though abuse.net rarely sends out more than a few hundred real messages per day. A precedent confirming that this misuse of innocents' addresses would have been a useful tool for future cases.

Sentencing on the charges to which Soloway confessed is scheduled for June, and he could get 20 years or more.

Claimer: Had the case gone to trial, I would have testified for the prosecution as a technical expert.

By John Levine, Author, Consultant & Speaker. More blog posts from John Levine can also be read here.

Related topics: Spam

WEEKLY WRAP — Get CircleID's Weekly Summary Report by Email:

Comments

To post comments, please login or create an account.

Related Blogs

Related News

Topics

Industry Updates – Sponsored Posts

Nominum Launches Comprehensive Suite of DNS-Based Security Solutions for Russian Service Providers

Nominum Sets New Record for Network Speed and Efficiency

DNS on Defense, DNS on Offense

Managing Outbound Spam: A New DNS-based Approach For Stopping Abuse (Webinar)

MarkMonitor Fraud Intelligence Report, Q4 2011

MarkMonitor Fraud Intelligence Report Released for Q2 2011

The Botnet-Counterfeit Drugs Connection

New Monthly Fraud Intelligence Report Now Available

MarkMonitor to Highlight Importance of Cross-Functional Approach to Brand Protection

Paid Search Ads Can Lead to Fake Goods

Open Phishing Season

.ORG Highlighted for Success in Fighting Phishing

Latest Brandjacking Index Examines How Fraudsters Abuse Financial Brands

New Report Shows .INFO Domain Safest from Phishing Attacks

MarkMonitor AntiFraud Solutions Combine Proven Antiphishing and Expert Antimalware Capabalities

COCC Partners with MarkMonitor for Anti-Phishing Services

ICANN Mexico City Meeting Brings a Significant Shift in Direction for Brand Rights Holder Issues

MarkMonitor Year-in-Review Report Finds Online Abuse of Major Brands Was a Growth Industry for Fraud

Committed to Keeping the Internet a Safe Place

Spam Arrest Chooses UltraDNS to Enhance Service Delivery

Sponsored Topics

Verisign

Security

Sponsored by
Verisign
Minds + Machines

Top-Level Domains

Sponsored by
Minds + Machines
Afilias

DNSSEC

Sponsored by
Afilias
dotMobi

Mobile

Sponsored by
dotMobi