Sample personal emails involved in the campaign:
dirbinsaabol@mail.com
hi.mymail@yandex.com
Sample domains known to have been involved in the campaign:
linuxkrnl.net - 193.109.68.87; 191.151.156.205
ns1.carbon2u.com
accounts-qooqle.com
account-gooogle.com
accoounts-google.com
account-yahoo.com
accounts-googlc.com
accoutns-google.com
addmereger.com
akamainet.net
akamaivirusscan.com
apple-icloud-services.com
apple-notification.com
arabianbusinessreport.com
azamtelecom.com
babylonn.com
baengmail.com
boobleg.com
chinainternetservices.com
com-hdkurknfkjdnkrnngujdknhgfr.com
combin-banska-stiavnica.com
cvk-leaks.com
fb-security.com
g00qle.com
global-exchange.net
googlesetting.com
hlbnk.com
homesecuritysystems-sale.com
icloud-localisation.com
imperialc0nsult.com
informationen24.com
interglobalswiss.com
intra-asiarisk.com
invest-sro.com
iphone-onlineshopping.net
kur4.com
lastdmp.com
localisation-apple-icloud.com
localisation-apple-support.com
localisation-mail.com
login-163.com
login-kundenservice.com
magic-exchange.com
mail-apple-icloud.com
mailpho.com
malprosoft.com
medicalalertgroup.com
megafileuploader.com
mfadaily.com
mfapress.com
militaryexponews.com
msoftonline.com
myaccountgoogle.com
myaccountsgoogle.com
mydomainlookup.net
mypmpcert.com
net-a-porter-coupon.com
newiphone-online.net
newiphone-supply.net
newreviewgames.com
nobel-labs.net
nvidiaupdate.com
obamacarerx.net
onlinecsportal.com
pass-google.com
password-google.com
paydaytoday-uk.com
pb-forum.com
planetaryprogeneration.com
regionoline.com
security-notifications.com
service-facebook.com
servicesupdates.com
set121.com
set132.com
set133.com
sicherheitsteam-pp.com
sicherheitsteam-pp.net
skypeupdate.com
smp-cz.com
soft-storage.com
solutionmanualtestbank.com
ssl-icloud.com
team-google.com
techlicenses.com
techlicenses.net
ua-freedom.com
updates-verify.com
us-mg7mail-transferservice.com
us-westmail-undeliversystem.com
us6-yahoo.com
vatlcan.com
wordpressjointventure.com
ya-support.com
yandex-site.com
yepost.com
Sample IPs known to have been involved in the campaign:
23.227.196.217
176.31.112.10
191.101.31.112
191.101.31.6
89.40.181.119
Sample names involved in the campaign:
Mike Long
Ward DeClaur
Daniel Farrell
Jason Scott
Richard Gingrey
Alice Donovan
Den Katenberg
Yuliana Martynova
Karen W. Millen
James McMorgans
Kate S. Milton
Stay tuned!
Exposing a Currently Active Portfolio of High-Profile Cybercriminal Email Addresses - Part Four
0I've decided to share a recently profiled portfolio of high-profile cybercriminal themed email addresses with the idea to assist U.S Law Enforcement and the U.S Intelligence Community on its way to track down and prosecute the cybercriminals behind these campaigns.
Sample emails known to have been involved in the campaign:
richard_tveter_2005@yahoo.com
mardoran@hotmail.com
secway26@rambler.ru
tytyo_kkk@mail.ru
beautiful_algv@yahoo.com
mihishaha@yahoo.com
neo2srx@yahoo.com
mihuanyao_lover@yahoo.com.cn
svetlana_serg26@yahoo.com
newcat@fromru.com
maff@ua.fm
wmliza@mail.ru
card-service@bk.ru
r0bing00d@yahoo.com
1sd@list.ru
dada777@inbox.ru
mekmekov@yahoo.com
oxygen121@gmail.com
bouzo@mal.ru
mayhem7@post.com
a234retf8@yahoo.com
lebertyreserve29@yandex.ru
saneksanek@yandex.ru
dottss@gmail.com
arm.defense@tut.by
hotgirl8820@yahoo.com
raliki@hotail.com
ns7100@gmail.com
AMBALok@gmail.com
iilabs@gmail.com
gildersleeve@representative.com
misc323@safe-mail.net
miraxmd@yahoo.com
jb.giver@gmail.com
markkuehling99@yahoo.com
ivan.zakarov@googlemail.com
ctrlspace@mail.ru
snake_s@hushmail.com
wess101@mail.ru
ITex@safe-mal.net
forkeks@Safe-mail.net
nitefox187@yahoo.com
msg_dark@yahoo.com
markschweir@yahoo.com
salton@drop4rent.info
kkimmi@mail.ru
mz4crt_p1n@mail.ru
kollega1987@mail.ru
stunkofpunk@gmail.com
uhozhu@front.ru
home5@inbox.ru
denmon_kg@mail.ru
d.s45@bk.ru
skyinthesea@mail.ru
is4ez@yahoo.com
Tikkatak10@gmail.com
hwrsmail@yahoo.com
orgish_andrey@mail.ru
cargofs@gmail.com
vldb@safe-mail.net
kattz@mail.ru
realm@freecj.com
mazafakacecil@rambler.ru
mail4crap@hush.com
vaiomz@yahoo.com
amka_s@mail.ru
offspring2003@mail.ru
vorui@bk.ru
zabriskiuntverpen845@mail.ru
ddan@mail.ru
ib1aqq73he@yahoo.com
dex_lawsen@bluebottle.com
theberserk@safe-mail.net
johnnytorrio_01@yahoo.com
sladernon@antichat.ru
bnyt@safe-mail.net
markyc05@safe-mail.net
john.silver.jr@gmail.com
bro.mazafaka@gmail.com
isaacgalegos@live.com
doctordre@Safe-mail.net
fan.n9@rambler.ru
nick.wanderer@gmail.com
jcdev@protonmail.ch
free0sky@rambler.ru
avolgin76@gmail.com
cortes@exploit.im
elusive140@yandex.ru
theprotection@safe-mail.net
perezoricardo@yahoo.it
hochukupit@gmail.com
aleks9ndr@tutamail.com
gl2me2gl@yahoo.com
zct@ptz.biz
addraddr@gmail.com
sandrodiascomprende@yahoo.com
torexan@yahoo.com
nodesign@yandex.ru
sereda333@yahoo.com
m@m.hk
vagabonds@safe-mail.net
chrixxmorris@yahoo.com
cash@contractor.net
-@0nl1ne.at
kennibig@yahoo.com
eric@g.com
petzlnow@googlemail.com
davidexfin@gmail.com
dampil@gmail.com
eeemaileee@safe-mail.net
ivanov173@gmail.com
puzb1p@gmail.com
genterman0911@mail.ru
workhardandgetcash@mail.ru
jnash6@gmail.com
sssr007@yahoo.co.uk
unauthdirtydeeds@gmail.com
support@openvpn.ru
west.denny@yahoo.com
levo@iname.com
dale.goodson@yahoo.com
flooddos@rambler.ru
gregory@faber.net
BlgspuQk@Safe-mail.net
Tereveniblin@gmail.com
forex01@runbox.com
danielmuzic@yahoo.com
lasylvfa@gmail.com
falcon340@gmail.com
minotatu@yandex.ru
FirstFresh11@jabber.org
calrcox12345@yahoo.com
infraud@yandex.ru
nolan@californiamal.com
ntaccessjit@yahoo.com
likevisa@gmail.com
miller1444@gmail.com
hoteltokio@yahoo.com
atom@humanoid.net
irvindmelind@gmail.com
denshauhoward@protonmail.com
mext@bk.ru
cctron@gmail.com
ud389dj9@yahoo.com
bossf@gmail.com
wermansed@gmail.com
bcd@europe.com
wilson.vn.inc@gmail.com
77.uk@mail.ru
bordo@jabber.se
petrigemobile@petml.com
latertrans@gmail.com
bernardoprovencano@yandex.ru
ccbesik@gmail.com
ohlsson76@gmail.com
vilia13@rambler.ru
promo_mail@yahoo.com
alexandr.volkov@gmx.us
software_komp@yahoo.com
mpotop441@yahoo.com
jahamota@gmail.com
urbanwave@yahoo.com
davidhershey@rocketmail.com
gugulya@safrica.com
sawyer.on@gmail.com
scamp7777@googlemail.com
sssr12345@gmail.com
akunamatata1@protonmail.com
mikelarose8@gmail.com
black.art@bk.ru
butt-head90@yandex.ru
v@voland.cc
zygin1@gmail.com
specialist.7777@gmail.com
prava@mail.org
doubtan1111@gmail.com
flipik23@yahoo.com
danil_ural@yahoo.com
flowerstoy7@mail.ru
jonzvitt@yahoo.com
rusrid@gmail.com
alanbakernyc@yahoo.com
neggaster@gmail.com
dm123321@gmail.com
opedsa@mail.com
nreky@yahoo.com
r231231312312421@yahoo.com
kalisher1122@yahoo.com
ininho55555555555@yahoo.com.in
ukjden@gmal.com
ok@ok.com
partner4ik@yahoo.com
rodert.harrison@gmail.com
cash.group@yahoo.com
stor8288@safe-mail.net
4232vlad@gmail.com
scanservisdv@gmail.com
poloz.dimulya@mail.ru
digweedsound@gmail.com
support@affstats.biz
visa_focus@yahoo.com
gigabait78@mail.ru
dearon08@gmail.com
Try2CheckMe@gmal.com
1@12.com
bruse.macmahon@gmail.com
sj6105@gmail.com
mr.qwertys@googlemail.com
sds21v@mail.ru
lucik.andrey@yahoo.com
xottab6ich@gmail.com
megarapide@yahoo.com
takahashi.cash@gmail.com
roshkvip@gmail.com
extndforum@gmail.com
procashcorp@gmail.com
baks2008@yandex.ru
seofun77@gmail.com
lilk2006@yandex.ru
die.leiche@gmail.com
shaks@ya.ru
alexwyoming@gmail.com
oldfenix@inbox.ru
johncool@Safe-mail.net
rchrdrglnd@gmail.com
asiento77@gmail.com
manaimar1@gmail.com
dalsjkdlkasd@gmail.com
k1976sh@seznam.cz
valex7@gmail.com
mm122990@gmail.com
support@sweetsexsite.com
verified900@yahoo.com
ruscomps@inbox.ru
nimful12131415@gmail.com
cermanik@gmail.com
ioanpavlov@yahoo.com
aerostars18@gmail.com
paimao@yandex.ru
xix.user@gmail.com
vegasfromchicago@yahoo.com
robben@london.com
etcher2007@gmail.com
ayoolu.omo@gmx.com
FunkyTalk@jabber.se
blik@jabber.no
rexsilver@jabber.cz
root@corps-software.info
karihardi@gmail.com
pro@hot-chili.net
modnar@jabber.ru
jasreop@yahoo.com
sergio.raviolli@aol.com
leniv_2@xmpp.jp
litovecki-leh@rambler.ru
rstrecord@yahoo.com
sales@servergun.com
mr.kasim74@mail.ru
Lauri_whiter@yahoo.com
chingizz@pm.me
1234901dsa@gmail.com
wizinfo7@gmail.com
informatik-forym@yandex.ru
alexes.2010@qip.ru
upchix@yahoo.it
ferragamo2013@gmal.com
rabotak3@yandex.ru
nackruchivatel@jabber.jp
mik@jabbim.sk
david645i@yahoo.com
olo@opa.la
dapcevicf@live.com
feedback86@live.com
Slaige_ex@xsmail.com
aquabox@jabber.jp
marylucasa9@hotmal.it
Mok@la.yt
mr.albandy@yandex.ru
eduard.rook@inbox.lv
TedDurham63@revenue.com
godaccs@gmail.com
Hig@hway.com
x5ms3@mail.ru
blackjack121@yandex.com
mail@logservice.com
bendr956@gmal.com
lomarklow23@yahoo.com
epolc@mail.ru
3d@businessall.net
l0vesan666@yahoo.com
Ioshkin@Kot.in
norbertkorpek@gmail.com
richdoug@yandex.ru
blunder333@yahoo.com
david.akimov@gmail.com
lyndst6@hotmail.com
nakolujnii@rambler.ru
clincoln@gmail.com
katarina@jsrv.org
pak@live.com
triest@yahoo.com
xxomax@yahoo.com
sky44@email.com
bono@dara.net
ng@jabber.no
sdams@yahoo.com
babos@list.ru
gazprom2222@yahoo.com
zorton@jab.org
khan@climko.org
unix1221@hotmail.com
laimis.sim@web.de
marvin.uk@mail.ru
kk77@default.rs
ot@limun.org
kino@swissjabber.ch
babos52@mail.ru
Piramidepiranija@mail.ru
crystalo@jabber.ru
asdkhasjeg1287361@gmail.com
galiotto2011@gmail.com
jbjb1020304050@jabber.ru
kingsizexxx@exploit.im
moskovka2@mal.ru
meisbatman4@gmal.com
samuil@0x48k.cc
stnkn@maii.ru
moysha@climm.org
antibiotik@korovka.name
swindler5@xmpp.ru
Landron@safe-mail.net
999@xmpp.jp
shk@et.com
sim@sim.pl
sgs@jabber.no
itional@yandex.ru
shifr77777@exploit.im
molot@swissjabber.ch
skyfall800@yahoo.com
eurodream777@ymail.com
BREMBO@europe.com
validcc@0nl1ne.at
mazar@mazar.ma
berg@neko.im
recovery3000@protonmail.com
ch@jabber.org
oldnew@gmail.com
vkarleone@protonmail.com
kosmopolit9@gmail.com
nellymarytanase@yahoo.com
john.beebop@gmail.com
jackychan@europe.com
weffy61@gmail.com
evilworm@xmpp.jp
hercogfrolen@yahoo.com
alanskix@thesecure.biz
adasler@live.com
nikitko.hud@googlemail.com
y@macjabber.de
auth@jabber.se
at@0nl1ne.at
hdfyfdgdfg@jfjgu124434342dfhjj.com
tremels@rediff.com
martinstr123@gmail.com
be.clint@yahoo.com
garden@im.flosoft.biz
y@aveg.me
Arbitr4@maza.cc
maxim.loginov@inbox.ru
botrabot@rocketmail.com
swordfish77555@yahoo.com
manager@0nl1ne.at
sandokan7@safe-mail.net
roud@linuxlovers.at
9781k10@bk.ru
anonymous13@hush.com
anonymous130@hush.com
deboshxxx@gmail.com
trakher@gmail.com
t0ilet@tsec.pro
rynka.ltd@gmail.com
biz@jabber.at
hiddenuser@jabber.cz
razor@swissjabber.ch
mwrd69@mail.ru
roman.gromov777@gmail.com
elly@exploit.im
JMin9990@gmail.com
cia1one@mal.com
vlad_maxaon@mail.ru
blackhatnew@googlemail.com
bil@rambler.ru
hqspence_6@hotmail.com
cb1h@climm.org
guter6848@gmail.com
wash1017@mail.ru
xxx@securetalks.biz
maxziz01@gmail.com
wordfish@mail.ru
ivanpetrov@uymal.com
papa333@list.ru
innspirit2012@gmail.com
i.poo2000@yandex.ru
debro@exploit.im
luigi@default.rs
z33ps@jabber.cz
rexetol@mail.ru
7guest@jabber.org
spart.sv@gmal.com
chomes71@gmail.com
bor.duka4eff@yandex.ru
porsche777@thesecure.biz
mdonatti44@hotmail.com
volkoff@jabber.ru
miron1@xmpp.jp
nickelback@jabster.pl
bugatti@xmpp.jp
adm@unitaco.com
h@jabbim.com
pving@codingteam.net
jj@copov.net
ukraine@maillim.com
forme.ltd@zoho.com
8twattle@twattle.net
medoedupox@protonmail.com
garry.kasparov@safe-mail.net
dor@jabber.cz
6d6f6e6579@676f6c64.biz
edis.werton@gmail.com
nagibator@tutanota.de
zlatko@0nl1ne.at
cryptograf@ymail.com
drops-uk@jabber.ru
911@thesecure.biz
gruver@mrgruver.com
simke@jabber.vc
nameja@inbox.ru
admin@off-sho.re
gert@jabster.pl
avaman555@rambler.ru
archi@jabber.ccc.de
stegi@tuta.io
v.o4karik@yandex.ru
lockinprofit@exploit.im
V-2013@sj.ms
shefferrol@xmpp.jp
anddevl@jabber.ru
true@reborn.com
rrigel@imun.org
kukutun@xmpp.jp
robert-burger@gmx.de
webprojects@contractor.net
london7london@gmail.com
london7@xmpp.ru
dcs@rows.io
portikul@sj.ms
dropsfromuk@jabbim.sk
newteam@hushmail.com
bander@cerberus.la
cake2004@yandex.ru
salimis@bk.ru
tankep@inbox.com
shadow.ekzot@gmail.com
poker3331@jabber.cz
kalilinux99998888@gmail.com
slsls@mail.ru
relainium@xmpp.jp
sofitel@thies.it
antpri@neko.im
ministriim@exploit.im
fx03nix@yandex.ru
ironhid@jabbim.cz
genrih@post.com
hs@mail.com
rat.zau@mail.ru
qwerqwer38@xabber.de
1provendor@jabber.ru
eglaguernon@mail.com
support@novus.pk
mail88888none@mail.com
total@jabber.mu
bigqik@gmail.com
studentv@jabber.se
primomandrake@gmail.com
mmishamc@gmail.com
first.artem@bk.ru
russvitiaaa@gmail.com
krikun@xmpp.jp
a-ikov@mal.ru
billywhels@verdammung.org
ogono@xmpp.jp
qwertysocks@mail.ru
dagger@jabberes.org
o6hajl@xmpp.jp
mys0133@gmail.com
k1b3r_p4nk@jabber.ru
Yamamoto22@xmpp.jp
trust@exploit.im
ganesh604@dukgo.com
dwb777@default.rs
finviz@jabba.biz
marwdmn@gmail.com
dozzer999@jaim.at
tramper@exploit.im
mr.cash@0nl1ne.at
altex@0bscured.net
1@3456.com
jazz@0nl1ne.at
Lui@ya.org
mr.bablomet@mail.ru
kilzzik@gmail.com
taco@jabbim.cz
red700@jabba.biz
johnson@exploit.im
phi@linuxlovers.at
cooker@0nl1ne.at
4ipalino@sj.ms
shackless@mail.ru
smile@safetyjabber.com
support@profitmaker.im
vovochka_dal@mail.ru
greenteam@swissjabber.ch
kilo@jabster.pl
zonder77@0nl1ne.at
hornet@mfclub.ws
c2oper@mpro.la
cashout-service@jabberes.org
feromon@neko.im
ccsversion1@verdammung.org
wehrwolf@evilwolves.org
netcat@thesecure.biz
bro@mazafaka.info
ernest@jabber.ru
heavygear@jabber.cz
csh@jabme.de
Jack@korovka.pro
junglebell777@jabber.ru
coirt@exploit.im
stepanxx90@gmail.com
tutututu@exploit.im
platon1980@xmpp.ru
goodw1n@jabber.cz
babtist@exploit.im
bugsy@exploit.im
0025@0nl1ne.at
nashc2h5oh@jabber.dk
kefka@sj.ms
aviracard@sj.ms
usa@exploit.im
messiah@zloy.im
cahal@sassssss111.com
lamborghini@jabber.se
zavulon777@xmpp.jp
1717@mpro.la
halya@inject4you.com
promac_new@protonmail.com
protected@mfclub.ws
insaner@linuxlovers.at
shantaram@jabme.de
eps-cash@wwf.tl
elvi@exploit.im
x@thesecure.biz
net@net.net
bossigorya@jabbim.cz
idealist@exploit.im
hasss@exploit.im
spichki@xabber.de
biller@default.rs
brazentmen@gmail.com
amgrik@im.koderoot.net
parampampam@jabber.org
freed0m@yax.im
mon3ywest@exploit.im
ocean@fastservice.com
sservice@exploit.im
corpbot@swissjabber.ch
hardlock@shangryla.net
jabberok777@gmail.com
johniren80@gmail.com
goosmail@protonmail.com
pandar1an74@0nl1ne.at
set@0nl1ne.at
ex@exploit.im
blackb0t@0nl1ne.at
Onlyship@xmpp.jp
levanec9@exploit.im
tnddin@xmpp.jp
gaze@jabbim.sk
mel@0nl1ne.at
tzarlt@exploit.im
wolfman@exploit.im
kotovskii@xmpp.ru
suntrust@exploit.im
williams1@pandion.im
ray@jabber.linux.it
inst1nct@shangryla.net
mufasu@exploit.im
blackangus@exploit.im
myne@exploit.im
obamich@mfclub.ws
597@xta.im
bb@mfclub.ws
robbbin@draugr.de
blackcoffe@0nl1ne.at
partymaker@mfclub.ws
zaraza@jclub.pw
w1llb30k@linuxlovers.at
xplo@brauchen.info
wows@jabbim.com
navie@exploit.im
greytech@patchcord.be
markdevido@exploit.im
pubicman@jabber.kiev.ua
pin_plus@exploit.im
sash@jabber.cz
ethlinor@protonmail.com
denvers@jabber.org
mod12@mfclub.ws
bhp@yax.im
mod10@mfclub.ws
obmennik@exploit.im
i@xta.im
topbro@xmpp.jp
themarket@exploit.im
cn_sicario@exploit.im
don1@1jabber.com
obmennikx@exploit.im
donkihot100@exploit.im
xterjex@gmail.com
dalikas@jabber.kiev.ua
jb498683492@1jabber.com
mopspops@xmpp.jp
emot10n@swissjabber.ch
d0ct0r@exploit.im
-@swissjabber.ch
green@xmpp.name
webkit@exploit.im
825164538@jabberes.org
user5055@exploit.im
012@mfclub.ws
the_reeper@jabber.org
skrill_support@creep.im
diegogo@xmpp.jp
goobs_1@exploit.im
berlin7778@talk.mipt.ru
1up@0nl1ne.cc
mod11@mfclub.ws
boo66@exploit.im
tunahost@yandex.ru
48512753@xta.im
root123@jabbim.cz
admin@localhost.com
stacksm@ch3kr.net
goldend2@exploit.im
m48h@exploit.im
molot_drop@exploit.im
zero001@exploit.im
littlebears@exploit.im
redsnapper@jabber.de
221.221.221.221@mail.com
dungeonkeeper@xmpp.pro
lokid@xmpp.jp
Sandokan@0bscured.net
lynx999@jabbim.cz
sskoaksokaokaoskoas@jabber.hot-chilli.net
amigo112@linuxlovers.at
supp_terror@pandion.im
farinet@mazafaka.info
glasgow@jabb.im
Mulag1@exploit.im
a@xta.im
959595@jabb.im
crddoktor@pm.me
m1k3y@neko.im
bigboss3412@0nl1ne.at
ph.d@jab.undernet.cz
fluxdns@gmail.com
krut@jabber.sk
skydex@exploit.im
rh1n0@xmpp.jp
hirok77@xmpp.jp
ace@lcp.cc
comediant@jabber.dk
serebrei8@jabb3r.de
badhombre@tutanota.com
BaseBuyer@xmpp.is
ddosplay@jabber.org
nobel@thiessen.it
mek@exploit.im
belialus@xmpp.jp
roofer@xmpp.jp
maza@jabbim.ru
i@mainjabber.com
likeadesign@exploit.im
8374@jabber.fr
0bnal@exploit.im
shady100@protonmail.com
filthyfew1312@jabbim.sk
bizdev@exploit.im
Xprox@1.com
las_vegas@draugr.de
manssoni@xabber.org
masterblaster@exploit.im
bitcoin@intellectx.ru
looklingtobuy@xmpp.jp
dreamdream@jabbim.cz
1337@mfclub.ws
kerberosik@jabber.de
Moderator@x.com
joseph@mazafaka.info
dailem@Safe-mail.net
ghost911@xmpp.jp
080808@jabber.no
crymsonwyrm@exploit.im
mus3@xmpp.jp
dillinger@thesecure.biz
2Garln@exploit.im
weteam@jabbim.sk
nash0@exploit.im
agora@exploit.im
0x73686f70@slilpp.me
satanna@exploit.im
kazobmennik@cashgroup.me
mod6@mfclub.ws
france@jabb.im
Dacorox@kode.im
benumb@mescalito.be
mod4@mfclub.ws
volk@zloy.im
info@brokercap.com
kembrij@keemail.me
washingtonnn@xmpp.jp
1@isilence.biz



RSS Feed