Security professionals and bloggers suggest a hacker going by the name Alexey Tolstokozhev may never have existed.

Thomas Claburn, Editor at Large, Enterprise Mobility

October 12, 2007

2 Min Read

Contrary to rumors circulating on the Internet, Russian spammers are alive and well.

A blog post on Thursday by someone writing under the name Alex Loonov claimed that Alexey Tolstokozhev, a Russian spammer, had been found murdered in his house near Moscow.

Tolstokozhev "has been shot several times with one bullet stuck in his head," the post says. "According to authorities, this last head shot is a clear mark of Russian hit men (known as "killers" in Russia)."

To many security professionals, the post had the clear marks of a hoax.

On his company's blog, Alex Eckelberry, president and CEO of Sunbelt Software, noted, "Alexey Tolstokozhev doesn't show up on ROKSO [Register of Known Spam Operations]. He doesn't show up on any Web searches. And no one I know in the security industry has ever heard of this guy."

Eckelberry also observed that the site belonging to "Alex Loonov" had been registered that very day, at a domain registrar known for hosting disreputable content.

Other bloggers provided further details debunking the supposed killing.

The fact that the story spread like wildfire online may have something to do with the way that social engineering attacks of this sort offer wish fulfillment -- no one likes a spammer and everyone likes to think that justice gets done. It may also have something to do with a similar story that circulated in 2005 and was also widely covered.

That story, too, it appears, was misleading, at least as initially reported.

Notorious spammer Vladimir Kushnir was found dead in his apartment, bludgeoned to death in July 2005. The story received considerable attention, probably because there are a lot of people who'd like to see spammers punished. But subsequent reports indicated that Russian authorities did not believe that spamming led to Kushnir's demise; they attributed it to a robbery gone wrong.

Why bother with such a hoax? Perhaps a phisher is testing the response rate for telling people what they want to hear.

About the Author(s)

Thomas Claburn

Editor at Large, Enterprise Mobility

Thomas Claburn has been writing about business and technology since 1996, for publications such as New Architect, PC Computing, InformationWeek, Salon, Wired, and Ziff Davis Smart Business. Before that, he worked in film and television, having earned a not particularly useful master's degree in film production. He wrote the original treatment for 3DO's Killing Time, a short story that appeared in On Spec, and the screenplay for an independent film called The Hanged Man, which he would later direct. He's the author of a science fiction novel, Reflecting Fires, and a sadly neglected blog, Lot 49. His iPhone game, Blocfall, is available through the iTunes App Store. His wife is a talented jazz singer; he does not sing, which is for the best.

Never Miss a Beat: Get a snapshot of the issues affecting the IT industry straight to your inbox.

You May Also Like


More Insights