Excel files are the latest format to be taken over by spammers for use in pump-and-dump stock scams, according to Commtouch.
The firm, which makes anti-spam and email security products, said it first began detecting Excel spreadsheet-based spam on 21 July. The spam promotes stocks in attachments with names such as "invoice 20202.xls", "stock information-3572.xls" and "requested report.xls".
Commtouch chief technology officer Amir Lev said the shift is likely to indicate that other formats are in line to be co-opted into this particular form of spam. "We expect other file formats to follow suit; think of the spam potential in Powerpoint files, or Word documents," he said in a statement.
Pump-and-dump scams illicitly promote shares in particular companies, raising the stock price so that the scammers can then sell their own shares and reap the profits.
Commtouch said the use of such attachments is designed to get around spam filters that analyse messages based on content. The technique has previously been used to spread viruses, most recently with the sharp growth of PDF spam reported earlier this month.