RSS Feed
TwitterHaving been blogging this topic for quite a while, I figure this might be a good time to highlight some of the snippets of information that people have posted on some of those blogs (anonymized, of course). You might also be interested in a resource page I've started here at AVIEN.One prospective victim instructed to connect via the Run window to www.support.me. This turns out to belong to...
Thứ Tư, 30 tháng 11, 2011
Thứ Hai, 21 tháng 11, 2011
12:12
nam tóc xù
The hpHOSTS Hosts file has been updated. There is now a total of 216,044 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)Latest Updated: 21/11/2011 18:30Last Verified: 21/11/2011 19:00Download hpHosts now!http://hosts-file.net/?s=Downl...
Thứ Ba, 15 tháng 11, 2011
23:17
nam tóc xù
I thought I'd made this clear, but apparently not. I got an e-mail earlier, from a RoadRunner IP (residential US ISP), using an @up-yours.com address.There's two problems here however;1. It's an invalid address, so can't reply2. The e-mail houses a childish threat, without actually telling me what I did to deserve it*********************************************************************General**...
Chủ Nhật, 13 tháng 11, 2011
16:29
nam tóc xù
According to a post at my favorite news site, it looks like Lavasoft' new owners are the infamous chaps behind the well known "Interactive Brands". Should've seen this coming really, given they de-listed the well known malware player, WhenU, some time ago - I know that was 6 years ago, but it can't just be a coincidence, especially given who the new owners are.Anti-spyware company Lavasoft AB is...
Thứ Sáu, 11 tháng 11, 2011
05:03
nam tóc xù
You may remember, in September I blogged about Internet.BS, well known as a bulletproof provider for domain registrations.Sadly, neither Verisign nor ICANN have done anything, and Internet.bs are still refusing reports (I say refusing because whilst the error is a 450, they were notified months ago and it's still producing the same error, preventing reports going through), courtesy of the Gmail...
Thứ Tư, 9 tháng 11, 2011
13:32
nam tóc xù
Following an article I wrote recently for SC Magazine, Martijn Grooten of Virus Bulletin, who shares my interest in and dislike of support desk scams, contacted me about the web site associated with eFIX, a company claiming to offer online technical support. He and I, along with Steven Burn, who has a great deal of experience of working in this area, have been able to dig out some interesting...
Thứ Ba, 1 tháng 11, 2011
17:26
nam tóc xù
Look at the image on the left. See anything that shouldn't be there?I'll give you a hint - it's got a black background.I identified this whilst doing a routine enquiry on an IP housing a plethora of fake meds sites. I dropped a note to the sites owner and registrar, who informed me it most definitely should NOT be there.The content in question, is;
Popular Posts
-
You've probably noticed by now that the server that houses it-mate.co.uk and forum.avantbrowser.com (amongst others), is down and has be...
-
[NEW] Fri Jan 18 13:44:56 JST 2013 The New Infector Domain of dfudont.ru:8080 was detected & analyzed--> >[HERE] PS: dfudont.ru:80... -
Having been suspended from more hosts than I care to remember, Blackshades are on the move again today, having been suspended from Snelis. T...
-
*) This post is dedicated to MalwareMustDie Malware Crusaders team involved! Maybe some of you read our previous blog ( HERE ) when we crack... -
Monitoring the activity of one blackhole (in short: BHEK) host means spending time on it for days. I picked one positive BHEK host in 203.91...
-
Just a note folks, the incoming mail server started having issues again yesterday (incoming server is controlled by Domain Monster). Spoke t...
-
Following the previous blog posts, the cases of PseudoRandom or JS/RunForrestRun infector, in this Crusade we found the new bad actor's ...
-
We all know about what had happened in US recently, it is a very sad & unfortunate situation. People died during the accident and the ma... -
Looks like the Blackhole folk are branching out from the usual LinkedIn etc, e-mails leading to the Blackhole exploit. Nothing new as far as...
-
This post is dedicated to many.. so many of wonderful individuals involved with the effort to stand against Kelihos P2P malware infection. T...
Design by NewWpThemes | Blogger Theme by Lasantha - Premium Blogger Templates | NewBloggerThemes.com