PropellerAds, Felix Leshno (softologic.com, appround.biz), Adf.ly, AdJuggler, AirSoftware, PerformerSoft, etc

Whether it's those god awful "fake surveys" that you can rarely get through to get the "leet crack", "free iPhone" etc from the skiddies that aren't skilled enough to do anything else, or the ad networks that keep allowing companies such as PerformerSoft, or file hosting and redirection sites such as Adf.ly, LinkBucks, FileSwap, Mediafire etc etc etc, we keep seeing a plethora of blatantly...

Read More

FYI folks

Just an FYI folks, I'm having a few issues with my primary machine at present, so if you've sent me an email over the past couple of weeks, please rest assured, I will get to it as soon as I can (please feel free to re-send it).I've also fixed at least once issue with the hphosts-partial.asp file. I'm aware of an issue still affecting HostsMan users, and am awaiting a reply from a friend...

Read More

The result on 48hours+ in battle with Kelihos < request for FURTHER block/dismantle cooperation & support. #Tango is going down..

This post is dedicated to many.. so many of wonderful individuals involved with the effort to stand against Kelihos P2P malware infection. This is an example on WHAT CAN BE DONE if InfoSec are gathered to fight malware infection. This report is totally an effort of a team contains members who simply believe the same dream, to free our internet from malware. We cannot make a list of your (so many)...

Read More

hpHosts: Updated 07-08-2013

The hpHOSTS Hosts file has been updated. There is now a total of 218,563 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)Latest Updated: 07/08/2013 16:19Last Verified: 04/08/2013 12:00Download hpHosts now!http://hosts-file.net/?s=Downl...

Read More

"You hacked.. We cracked & You're doomed!" - An IR adventure of an abused "WP Super Cache" plugin for Exploit Kit (Glazunov) infection

"I dedicated this post to our members on visit to BlackHat & Def Con 2013, who's helping to present our group in the security community, with deeply regret that I could not make it to go there, no matter how bad I would like to.Thank you to @hugbomb, @set_abimone and @kafeine for the help in the spotting redirection, EK confirmation and flushing samples, to @hFireF0X and other Kernel Mode members...

Read More

Oh dear ... Yelena Mizulina out does Cameron!

Just when you thought it couldn't get stupider than Cameron' imposing of the smut ban in the UK, this Russian politico has decided to out-do Cameron in the "yep, we can be even more brainless!".http://www.theregister.co.uk/2013/07/29/russia_to_ban_swearing_on_social_networks_good_luck/This woman has clearly never seen some of the Russian and Ruskranian blackhat forums I monitor (or for that...

Read More

[ALERT] Fake Google Chrome, and yet more malicious SysTweak shenanigans again

Looking up the POST beep codes for a Sony Vaio, led me to a thread on sevenforums.com a few minutes ago, which rather disgustingly (I'd say surprising, but I'm not surprised by SysTweaks ongoing badness anymore - they've been at it so long), led to 4 more examples, of misleading advertising, one belonging to Spark Trust, and 3 others belonging to SysTweak.The first [1] of these, is at least...

Read More