Spam News

Phishing of Windows Live IM accounts alleged in Microsoft suit

Friday, July 17, 2009

Microsoft has filed suit against Funmobile, Ltd., a Hong-Kong-based company allegedly involved in sending thousands of spam instant messages with links to phishing websites to users of Windows Live Messenger since March 2009.

Defendants Christian and Henrick Heilesen allegedly targeted customers with spam IMs, or "spims," that appear to come from the email address of a known friend or acquaintance and invite the recipient to click on a link to a phishing site, where users are asked to sign in with their IM username and password, according to the complaint.

Funmobile allegedly used access to phished user accounts to harvest users' IM contacts in order to send out more bulk phishing spam messages. Microsoft said phishing is a violation of the Windows Live terms of service and a violation of its customers' privacy.

"This filing is an important step in maintaining and improving the safety of our 320 million active Windows Live Messenger users," Microsoft said on its Windows Live blog. "With today's action, Microsoft is sending a clear message that this kind of activity is not allowed and that we're taking proactive steps to protect our customers accordingly."

Tim Cranton, Microsoft associate general counsel, said on the Microsoft policy blog that the company "is vigilant about using both technology and the law to fight illegal activity online."