WARNING: Malware, scams and RedStation (AS35662, 81.94.192.0/20)

Remember the SMS fraud housed on the RapidSwitch range? Well, now we've got yet another network involved.This time, it's the turn of RedStation, AS35662. I've already dropped them an e-mail, but the notice on their contact page suggests this is going to have been a completely pointless exercise.Note to SolicitorsIf you are a solicitor and you wish to communicate with us about a website hosted on

Read More

Innovative Marketing/Byte Hosting: Scareware scam charges

Ah how this has made my day.Federal prosecutors have accused three men of running an operation that used fraudulent ads to dupe internet users around the world into buying more than $100m worth of bogus anti-virus software.The defendants operated companies including Innovative Marketing and Byte Hosting Internet Services, which perpetuated an elaborate scheme that tricked internet publishers into

Read More

Paragon Virtualization Manager 9.5: Not quite virtualization

http://paragon-software.com">Paragon Software recently gave away free licences for it's Virtualization Manager, and I decided to check it out. Sadly I was to be disappointed, as contrary to it's name - it's not virtualization software at all.I already knew I was going to be a little disappointed when I noticed it wouldn't actually allow me to run an ISO (tried ISOs of both Linux and Windows) as a

Read More

Full Circle Magazine: Issue 37

Full Circle issue #37 is out with a review of Lubuntu, more programming in Python, talk about streaming media, and more. Don’t forget to listen to the latest episode of our companion podcast for the full FCM experience!This month:- Command and Conquer. - How-To : Program in Python – Part 11, Adding Screenlets, and Streaming Media. - Review – Lubuntu. - MOTU Interview – Stefan Lesicnik. - Top 5 –

Read More

WARNING: Blackhat SEO turns (once again) to exploits

Not content with serving up fake AVs and the likes, it seems one of the blackhat SEO gangs have one again, turned to serving up exploits instead. Obviously this leads to a fake AV infection aswell, but I thought this worth mentioning.The story starts not surprisingly, at Google, where you're searching for your favourite TV show, news clip, or something completely random, such as why you always

Read More

INFO: Malwaredomainlist.com is back

Just a note folks. The maintenance took less time than expected, so MDL is now back online :o)

Read More

Eset, Star Wars, dot.tk and rogues ....

On the hunt as usual, I came across yet another rogue, again using xorg.pl etc via blackhat SEO, but using .tk domains (surprise surprise). What I did find rather humorous however, was a javascript file that was loaded.The javascript contained a lovely little snippet, and a note for the folks over at Eset (though evidently, the bad guys got their Star Wars and Star Trek mixed up, as it was the

Read More