90% of all email was spam last month, according to Symantec's MessageLabs Intelligence Report, just released. The figure is up more than 5% in the last month. Good news, I guess, is that things can't get much more than 10% worse from here.The new MessageLabs Intelligence Report quantifies a number of trends, measured in April traffic, that give some insight into how the spammers are coming at us:

Spam runs on U.S. time: Spam levels peak in the U.S. between 9am and 10am, local. MessageLabs' conclusion is that either the most active spammers are based in the U.S., or that that first full hour of the workday is when recipients are likeliest to respond. My guess -- and it is a guess -- is that it's the latter; people settling in to work may be easier marks while the first cup of coffee is still warm than later in the day when they're preoccupied with other (one hopes more work-related) demands.

CAPTCHA can't catch 'em: The number of effective CAPTCHA-cracking tools is letting the spammers get around the random letter/number tests designed to keep spammers from getting around them; hence, the sharp increase in the number of phony social network and webmail accounts the spammers are creating. The report suggests that new, tougher CAPTCHA-esque technology on the horizon is driving spammers to CAPTCHA while the CAPTCHA-ing is good. Botnets are the base: Close to 60% of spam was botnet-generated, with the three most active bots accounting for more than a third of spam.

Social nets net spam: No news here that social networks, and free mail services are prime targets for address harvesting and malicious link distribution.

As I said at the outset, the spam situation, statistically, can't get much worse.

Bur of course it doesn't have to.

The complete MessagLabs Intelligence Report for May, 2009 can be downloaded here.

Looking to keep security high and security expenditures low? Check out bMighty bSecure SMB Security On A Budget, now available on-demand.