Follow GFI:
Find us on Facebook Follow us on Twitter Find us on Linkedin Subscribe to our RSS Feed Find us on YouTube Find us on Google+

Survey: UK Lags US in Using the Cloud to Combat Spam [INFOGRAPHIC]

on March 1, 2012

Spam may not be the headline-grabbing topic it once was, but as our research friends in the GFI Labs continue to point out, spam and phishing attacks are still a preferred tactic of cybercriminals.

To get a better sense of how businesses are coping with spam, we conducted a survey this month of 200 US and 200 UK IT decision makers at businesses with between five and 1,000 employees. While we assumed businesses continue to struggle with spam, we were surprised to learn how many businesses are not taking advantage of the latest technology available to them to combat these threats and better defend their networks.

An overwhelming majority of survey respondents—72% in the US and 75% in the UK—state they receive too much spam. Not a terribly surprising stat, but when asked about the volume of spam they were dealing with over the last year, more than 80% of respondents in both regions reported no decrease in the amount of spam plaguing their networks. In fact, 53% of US respondents and 61% of UK respondents report that spam volumes actually increased during the last year. Only about 15% of respondents saw a decrease in spam.

Seeing those numbers, it’s no surprise that 70% of respondents rate their anti-spam solution as either marginally effective or not effective at all. So what solutions are these businesses using to defend their networks? Here’s a breakdown:


Anti-Spam Solution



Rely on anti-spam capabilities of an antivirus suite



Rely on an anti-spam software solution



Rely on a cloud-based solution



Rely on an anti-spam gateway appliance



Do not use an anti-spam solution




There are some interesting findings revealed here.

First, while the heavy reliance on the anti-spam capabilities of an antivirus security suite is nearly identical in both regions, it is not among the smallest businesses where that is most prevalent. The highest percentage of businesses (about 65%) in the US and UK saying they rely on their antivirus suite for spam protection was among businesses with 50 – 99 employees. It was not among businesses with fewer than 50 employees, where one would expect less robust IT security awareness and expertise.

Second, it appears that US businesses have been quicker than their UK counterparts to adopt cloud-based solutions to battle spam and phishing attacks before they reach their network. More than 14% of US businesses are already using a cloud-based solution to combat spam compared to only 8% of businesses in the UK.

GFI Software is a strong proponent of a multi-layered approach to mail security. A comprehensive anti-spam solution incorporates a combination of defenses located on premise and in the cloud, which GFI Software provides through its GFI MailEssentials, GFI MailSecurity and GFI MailEssentials Complete Online™ product offerings. GFI MailEssentials Complete Online is the latest addition to GFI Software’s mail defense suite. This cloud-based service delivers fast, accurate response against inbound and outbound spam attacks and full defense against viruses, Trojans, spyware, worms, bots, rootkits, zero-hour exploits and other threats.

Businesses Know The Dangers of Spam

When asked about their top concerns about spam, security clearly topped the list. In the US, 29% of respondents say their top concern was malicious links and files often harbored in spam, while 22% cite how spam leaves their company and employees vulnerable to phishing attacks. In the UK, 23% and 22% of respondents cite malicious links and files, and potential phishing attacks, respectively, as their top concerns. Additionally, 20% of UK IT decision makers say spam’s impact on the responsiveness of their mail servers was their top concern.

Finally, nearly 90% of all respondents in both regions say they regularly educate employees about the risks of opening spam that arrives in their inbox. But are they doing enough? 40% of businesses in the UK and 44% of businesses in the US say their networks have been compromised as a result of employees opening malicious links or by responding to information requests contained within spam. Until businesses take full advantage of the latest technologies available to them to better block spam, they’re going to have to rely heavily on a well-educated employee base. We can probably all agree that is not enough.

How do you combat spam? Do any of these findings surprise you?

Here’s our infographic visualizing the survey’s US data:

Spam Survey Infographic 2012 - US

View the UK version of the infographic

Survey Methodology

The independent blind survey of 200 US and 200 UK IT decision makers organizations with between five and 1,000 employees was conducted by Opinion Matters on behalf of GFI Software. Download the full survey results.

Like our surveys and infographics? Subscribe to our RSS feed or email feed (on the right hand side) now, and be the first to get them!


Marvin Winters March 1, 20124:47 pm

Nice to see the majority of business educating their users. What I take from this survey is that while we see headlines all the time talking about spam at an all-time low, the reality is simply a focus in attention away from the gullible grandmas and the kids drowning in student loan debt looking for a get-rich-quick scheme. The focus of spam is being shifted towards business, to access company credit accounts, to gain access to files and proprietary tools and information that can be sold, and so on. That’s a headline for you right there.

Danny Huston March 2, 201210:02 am

This is very understandable as more small and medium enterprises are using the cloud computing platform in the United States. The country’s cloud figures and statistics are very much comparable to the whole Europe. The US is also the home of cloud software innovations. In effect, more organizations and enterprise in the country are aware of hosted anti-spam’s capabilities in running the business.

However, the United Kingdom is a growing market for hosted anti-spam software – much like in the emerging ICT markets of China, India, Russia, and Brazil.

Jarred LeFebvre March 2, 20123:49 pm


That’s a great point. As an example, you can read about a malware-laden spam campaign pretending to be from the U.S. Securities and Exchange Commission over at our GFI Labs blog that was just posted today. These spammers are targeting businesses and trying to get readers to execute a Blackhole exploit kit with malware that targets vulnerabilities in popular software from Adobe, Microsoft and others.

US Securities and Exchange Commission Spam Leads to Exploit and Stealer

Rickey Messa March 5, 20122:41 am

I’m quite surprised that five percent of businesses still do not use or have any type of anti-spam solutions. The survey should have known what are these businesses. Are these home-based enterprises owned by moms or are they family-owned with irregular office setups (much typically operated in houses)?

We are now in a hi-tech world. Even my 8-year old and 6-year old kids know how to use an anti-virus and anti-spam software. For this reason, businesses, even as small as having only three to five employees should have some sort of anti-spam solution. They can even use the free ones for a start. Some Internet service providers even offer anti-spam packages for their customers.

Washington Despi March 5, 20123:16 pm

Those people (approximately six percent of them) who were surveyed that said they don’t know what spam can do to them and their system are probably the most ignorant persons in the world. I mean, come on!!! Even my kids know that spam has malicious links and can phish attack.

Either these people do not know how the Internet works or they are just too ignorant about the world around them. Moreover, these people are the usual victims of spams and online scam because they can’t and don’t have any way of telling what is a valid email. Hello Nigerian scams.

J. Paul March 6, 201210:10 am

It’s really surprising that so few companies on both sides of the pond use cloud based antispam. Probably they are just unaware of this option? It can’t be the price that is stopping them for sure. Yet, it is not surprising that almost the majority go for a one-in-all security protection because this is the easiest route and it will take a really good education to make them break this habit.