![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioPRXcfvWDvp8Bx4IjAWZwk4gqXrXMQyGXNBvdxG0OYJycrvCojyAiYsYiyTH_t9NuYUZcr7A5UxbSNoot37yWLuHfkoYzhU6j_jNc0QalVPQsrTPEN4PattSVMmiP28KmnWD_/s200/fake_windows_media_player_codec.bmp)
The attached screenshot of very latest DIY windows media player with pretty straightforward instructions on how to modify the timing of the "missing codec" pop-up, is a great example of how cybercriminals rarely value the intellectual property of their fellow colleagues. The DIY template has in fact been ripped-off from a competing affiliate network participant (currently active xxxporn-tube .com/123/2/FFFFFF/3127/TestCodec/Best), its images hosted at ImageShack, and the codec released for everyone in the ecosystem to use -- and so they will.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEij_Rku4-uFD6mVK68U7KvBE6ieMsVnO8WO34puNdRDuHLJggMcUAic8Y53O3QW0M31MhxAUbalqGa6oEHmoCgIEyMnzcEHn_b5epSbT_71x6Tg9I7cTpG9_EnaGvo6LQnllNcm/s200/as12553_ZlKon_dns_changers_ukrtelegroup.png)
Portfolio of fake codecs serving domains parked at the original mirrored domain's IP :
xxxporn-tube .com (93.190.140.56)
uporntube-07 .com
tubeporn08 .com
porn-tube09 .com
tubeporn09 .com
xxxporn-tube .com
allsoft-free .com
all-softfree .com
lsoftfree .com
porntubenew .com
Download locations :
brakeextra .com/download/FlashPlayer.v..exe (94.247.2.183)
brakeextra .com/download/TestCodec.v.3.127.exe
Entire portfolio of domains parked at (94.247.2.183) :
brakeextra .com
thebestporndump2 .com
fire-extra .com
xp-extra .com
delfiextra .com
qazextra .com
track-end .com
fire-movie .com
extrabrake .com
crack-serial-keygen-online .com
extra-turbo .com
extra-nitro .com
apple-player .com
meggauploads .com
soft-free-updates .com
quicktimesoft .com
cleanmovie .net
nitromovie .net
trackgame .net
quotre .net
rexato .net
spacekeys .net
Dots, dots dots, trackgame .net is once again proving the multitasking mentality of cybercriminals these days - it's one of the download locations participating in the recent Google Video search queries poisoning attacks.
No comments:
Post a Comment