hpHOSTS: Update June 28th, 2010

hpHOSTS - Updated June 28th, 2010The hpHOSTS Hosts file has been updated. There is now a total of 124,285 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)Latest Updated: 28/06/2010 20:41Last Verified: 28/06/2010 22:38Download hpHosts now!http://hosts-file.net/?s=Download

Read More

Legal Software More Annoying than Most Viruses

In the past it was common for WinPatrol fans to report programs which were malicious, designed to steal data, monitor key strokes or create pop up ads. Sadly, the most common complaints I see now are for programs from legitimate companies.Google continues to top the list of companies wanting to make sure you have their toolbar and updates of anything else they feel you need, like it or not. A

Read More

hpHosts network

Just a note folks, due to a connection issue (I suspect with the ISP, they suspect my exchange), the network will be unavailable for approx 1 hour, from 1500 today. Apologies for the disruption (though if it's any consolation, I don't have access to the o2 mobile connection either until tomorrow, so will be offline for an hour aswell).The next hpHosts release will be out this evening.

Read More

Full Circle Magazine: Issue 38

In this issue, a review of Ubuntu 10.04, a new series on virtualization, and much, much more. Also, don’t forget to listen to the companion Full Circle Podcast for some good insight into the Ubuntu world.This month:- Command and Conquer. - How-To : Program in Python – Part 12, a NEW SERIES: Virtualization, and Browser Blogging. - Review – Ubuntu 10.04. - Top 5 – Favourite Applications. - plus:

Read More

Searching a search engine, leads to a search engine that's not a search engine but a search scraper that's not a search .... you get the idea

Look at the image to the left, what does it look like?No, that's not a trick question, it's a search engine right? A custom Google search perhaps? You'd be forgiven for thinking that, indeed, you could almost believe it's someones poor attempt at a parking page, given the domain is up for sale, courtesy of Sedo (more on that in a second).However, this typo-squatter, is hiding something more

Read More

Remembering Michael Jackson

It's exactly one year to the day, that Michael passed away, and fans such as myself, are still feeling the loss of a legend.Although I've never met him, I did see him live, and have been a fan for the vast majority of my life. His voice, his dancing, his personality, generosity, made him a true legend, someone that will never be forgotten, someone that has had a vast impact, and continues to have

Read More

Scam Alert: www-career-digest.com, gulfcoastnews9.com, gulfinquirer.com, crisot.info

Remember this?, well now there's more.URL: www-career-digest.com/?tr=adbrcpc&wz=1277421813.1275&tr2=www.ethical-hackers.org&tr3=468-r&kw=&tr9= (ethical-hackers.org is where the advert was found)Host: www-career-digest.com - registered via 1 & 1 (Schlund)IP: whoIP PTR: Resolution failed ASN: 33070 174.143.0.0/16 RMH-14 - Rackspace HostingOrgName: Rackspace Hosting OrgID: RACKS-8Address:

Read More

Domain registrars don't want to fight cybercrime - apparently

In a not so surprising turn of events, my favourite online rag, El Reg has reported that domain registrars have complained to ICANN, in not so many words, that they don't want to have to fight cybercrime.How was this going to happen you ask? By changing registrars ICANN contract to force them to fight it - something they should already be doing. We all know registrars are a huge part of the crime

Read More

Internet Explorer 8: Is "InPrivate browsing" really private?

We've all seen the adverts on TV and splashed on the web, telling us we can hide our browsing habits, by utilizing IE8' "InPrivate" browsing facility. But how private is this mode really? Will it for example, stop a suspicious spouse from spying on you? Will it prevent your employer or IT dept, finding out you're going to Facebook when you're meant to be working?You'd be forgiven if you'd said

Read More

Use Facebook? Play games? Use Facebook to play games?

If you're in the habit of using Facebook, don't worry, I forgive you. But joking aside, there's always a plethora of threats on social networking sites at any given time, and new ones are popping up on an almost daily basis.The latest of these, is detailed by my friend David at Eset;Blackhat SEO uses online games to distribute malwarehttp://www.eset.com/blog/2010/06/19/

Read More

Crimeware friendly ISPs: StarNet (AS31252 195.206.246.0/23 STARNET-AS StarNet Moldova)

Moldova based ISP, StarNet (AS31252) has been on every security researchers radar for a considerable amount of time now, and this isn't looking to change any time soon.StarNet is just one of several ISPs in Moldova, that's a haven for criminals spreading a multitude of malicious content, and the largest portion of this, is rogues. Monitoring one of the MITMs they're using, you can see new domains

Read More

Botnets: The good, the bad and the confusing

Both Jart at HostExploit, and Pedro Bueno at McAfee, recently reported on botnets being used by the good guys, aswell as the bad. See;http://www.internetevolution.com/author.asp?section_id=717&doc_id=193286&f_src=internetevolution_section_717http://www.trustedsource.org/blog/422The problem here, is that we've known for years that the bad guys were using them, and likely knew but didn't want to

Read More

ALERT: metsupport.com - yet another telephone based fraud (aka SupportOnClick revisited - again)

We've got yet another domain involved in telephony based fraud folks. This time it's metsupport.com, which is housed at 74.208.232.54 (PTR: perfora.net, AS8560 74.208.0.0/16 ONEANDONE-AS 1&1 Internet AG) and registered to an entity in India (sound familiar? it should do, SupportOnClick, TechMyHelp, Comantra et al, are all based there and all involved in the same activity) called "MET", who

Read More

Amazon: Watch what you're paying

Browsing for prices on Amazon, I came across something that simply stopped me right in my tracks - almost £2000 for half a gig of PC133 for a desktop! (wasn't after it for a desktop, was looking for prices for PC133 SODIMMs);Don't want to pay that for half a gig? Then you're definately not going to like this one;There is of course, a serious point to this. There's been quite a few cases of online

Read More

Scam Alert: news9online.org

When is an online rag, not an online rag? When it's a scam of course.Investigating a site on Bizland IP space, that was previously carrying malicious content, I noticed an ad that immediately got my attention, and not in a good way either. There were 2 primary things wrong with it;1. It was delivered via AdBrite - a company known for allowing very questionable adverts on their network2. The

Read More

Virgin Media + The Money Club: I wanna be a telepest!

I've just had an interesting conversation with Virgin Media. My mother has been receiving calls from 0116 225 3841 for the last 3 days, each time the phone was answered, the caller would instantly hang up without saying a word, giving the impression it's actually an automated dialer.I traced this number back to Virgin Media, and duly called them, having tried to call the number itself (constantly

Read More

Own an iPhone? Watchdog has some information for you

I've always avoided iPhones and the likes, and will be avoiding iPads and the likes too, primarily due to their cost, but namely because I've no need for them (my mobile makes and receives calls, and my laptop allows access to the internet and whatnot), but there's millions that do own an iPhone, and those of you with one, may have noticed a red tab on the outside? If so, your warranty is

Read More

Comodo + fake meds

Seems Comodo still aren't bothering to check who they're supplying SSL certificates to. Nice to know they give a damn isn't it.

Read More

Info: Windows Update + Atheros AR5007EG Wireless Network Adapter

If you happen to be running a machine with the following wireless card (i.e. those of you with Toshiba Satellite laptops), be sure you read the details before updating;Atheros AR5007EG Wireless Network AdapterI've just had an update available for this via Windows Update, and whilst it mentioned a restart would be required (though this information was ONLY available in the extended details, which

Read More

Update 3: Malware, scams and RedStation (AS35662, 81.94.192.0/20)

Re-checking the list of domains previously mentioned, shows they're on the move to a new range. This time owned by known crimeware friendly ISP, ROOT SA (aka Root eSolutions, AS5577 212.117.160.0/19, AS44042). The new IP is 212.117.169.106.There's only a handful resolving to the new IP at the time of writing, so presumably the rest are awaiting DNS propagation.http://temp.it-mate.co.uk/

Read More

Update 2: Malware, scams and RedStation (AS35662, 81.94.192.0/20)

Second update to this, and I'm pleased to announce, Redstation forced their customer to disable the sites completely (Redstation didn't want them on their network). A quick check has revealed those still resolving to the RedStation range, are now dead (sites resolve but fail to load), and those spewing malware, are now parked at parkwebwin-v03.prod.mesa1.secureserver.net (GoDaddy parking server).

Read More

UPDATE: Malware, scams and Redstation

Just an update folks. Whilst the sites are still live, the downloads appear to have gone *for now* (pretty confident they'll be back). I did hear back from Redstation, who asked for evidence, and such was passed to them.If you've paid for ANY of the software they're scamming and infecting for, contact your credit/debit card company and ask for a charge back.In the case of these particular domains

Read More

Site owners: Are you listening?

I come across hundreds of malicious sites each day, both compromised sites, and bad guys sites, and send hundreds of abuse reports each day for them.This morning, I received a rather strange e-mail from one of the hosting companies I'd sent an abuse report to, an e-mail with the following content;HelloCan you give me the ticket number of the tickets you have opened regarding the past?"It is a

Read More