Friday, July 16, 2010

Spamvertised Amazon "Verify Your Email", "Your Amazon Order" Malicious Emails

›
And they're back (Gumblar or RUmblar due to the extensive use of .ru domains) for a decent start of the weekend - switching social engin...
Thursday, July 15, 2010

Sampling Malicious Activity Inside Cybercrime-Friendly Search Engines

›
UPDATED, Friday, July 16, 2010 - Directi has suspended the domains portfolio of the cybercrime-friendly search engines.   Cybercrime-friend...
Wednesday, July 14, 2010

Exploits, Malware, and Scareware Courtesy of AS6851, BKCNET, Sagade Ltd.

›
Never trust an AS whose abuse-mailbox is using a Gmail account ( piotrek89@gmail.com ), and in particular one that you've come across to...
Tuesday, July 13, 2010

Cybercriminals SQL Inject Cybercrime-friendly Proxies Service

›
Cybercrime ecosystem irony, at its best. Why the irony? Because the cybercrime-friendly proxies service TOS explicitly states that its users...
Monday, July 05, 2010

Summarizing Zero Day's Posts for June

›
The following is a brief summary of all of my posts at ZDNet's Zero Day for June, 2010. You can also go through previous su...
Tuesday, June 29, 2010

Money Mule Recruiters Trick Mules Into Installing Fake Transaction Certificates

›
What is more flattering than Ukrainian blackhat SEO gangs using name as redirectors, including offensive messages, the Koobface gang redirec...
Thursday, June 17, 2010

Sampling 419 Advance Fee Scams Activity

›
Lottery Winning Notifications, Western Union payment notifications, dead relatives, advance fee schemes impersonating law enforcement agen...
Wednesday, June 16, 2010

Dissecting the Exploits/Scareware Serving Twitter Spam Campaign

›
Yesterday's exploits-serving campaign spreading across Twitter , using automatically registered accounts "pinging" random Twit...