Wednesday, July 14, 2010

Exploits, Malware, and Scareware Courtesy of AS6851, BKCNET, Sagade Ltd.

›
Never trust an AS whose abuse-mailbox is using a Gmail account ( piotrek89@gmail.com ), and in particular one that you've come across to...
Tuesday, July 13, 2010

Cybercriminals SQL Inject Cybercrime-friendly Proxies Service

›
Cybercrime ecosystem irony, at its best. Why the irony? Because the cybercrime-friendly proxies service TOS explicitly states that its users...
Monday, July 05, 2010

Summarizing Zero Day's Posts for June

›
The following is a brief summary of all of my posts at ZDNet's Zero Day for June, 2010. You can also go through previous su...
Tuesday, June 29, 2010

Money Mule Recruiters Trick Mules Into Installing Fake Transaction Certificates

›
What is more flattering than Ukrainian blackhat SEO gangs using name as redirectors, including offensive messages, the Koobface gang redirec...
Thursday, June 17, 2010

Sampling 419 Advance Fee Scams Activity

›
Lottery Winning Notifications, Western Union payment notifications, dead relatives, advance fee schemes impersonating law enforcement agen...
Wednesday, June 16, 2010

Dissecting the Exploits/Scareware Serving Twitter Spam Campaign

›
Yesterday's exploits-serving campaign spreading across Twitter , using automatically registered accounts "pinging" random Twit...
Tuesday, June 15, 2010

Facebook Photo Album Themed Malware Campaign, Mass SQL Injection Attacks Courtesy of AS42560

›
A spamvertised through Facebook personal messages, Photo Album themed campaign, with the domain IP responding to ZeuS C&Cs, combined wit...
Tuesday, June 08, 2010

Dissecting the 100,000+ Scareware Serving Fake YouTube Pages Campaign

›
Researchers from eSoft are reporting on 135,000 Fake YouTube pages currently serving scareware , in between using multiple monetization/traf...