The Federal Trade Commission launched a campaign yesterday to educate internet service providers about "zombies" - computers that spammers hijack to send spam anonymously and avoid detection. "Operation Spam Zombies" will send 3,000 letters to ISPs, urging them to take measures that prevent their customers' computers from being hijacked by spammers. The FTC, U.S. Department of Commerce, Department of Homeland Security and nearly three-dozen agencies from 25 countries (from Albania and Bulgaria to Poland and Spain) have joined the initiative.

Operation Spam Zombies recommends that ISPs apply rate-limiting controls for email relays; identify computers sending suspicious amounts of email, and when necessary quarantine that computer; provide customers with information and tools for removing zombie code; and so on.

The second phase of the operation will identify likely spam zombies and the providers that operate the networks hosting them. The coalition partners will then notify those providers and urge them to take corrective measures.

The FTC's web page for the project includes a project description, the text of the letter sent to ISPs, and a list of participating agencies. The partners also will post translations of the ISP letter on this website and post other updates concerning this project.

This campaign follows two others targeting spam "anonymizing" techniques: "Operation Secure Your Server" (2004) and a campaign against "open relays" (2003).