hpHosts: Impersonation = flattery?

They say impersonation is the sincerest form of flattery, wonder if ID theft victims believe that?I happened across a few domains a few days ago, that piqued my interest. They piqued my interest because their Google entry appeared to be a direct copy of parts of the hpHosts site. Looking further showed that actually, they'd not copied the site - they were pointing to it in their A records.

Read More

Take downs and cleanups: The good, and the rest

I've been involved in take down and cleanups and whatnot for longer than I care to remember now, and along the way, there's always been one constant - the refusal of some hosts/ASNs/registrars, to do their job (i.e. enforce their AUP/ToS) and take action against abuse (and in most cases, to bother replying at all). eNom for example, who for years blatantly ignored abuse and were found to be

Read More

Rising AntiVirus: We create the viruses we kill!

A well-placed Chinese security official has been given a suspended death sentence for taking bribes in exchange for his role in an antivirus software fraud scheme. Yu Bing, former director of the Internet monitoring department of Beijing’s Public Security Bureau, had his agency send out a “virus warning” telling the public to download software from the company Rising Antivirus, to combat a

Read More

IAC: Still not stopping "rogue affiliates"

I've got an update on SurfTown coming shortly (still not cleaned their network!!), but in the meantime, a look at what was reported to me as a spammer site, using the same well known fake news site layout, is sending people to SmileyCentral when you click their links - nice to know IAC are still not trying to put a stop to this .... (though perhaps not surprising).The site, grantsguide.info is

Read More

Update: Yet more connectivity issues

I am happy to report, I've gotten most of the problems sorted out, so most of the resources are now back online. fSpamlist was moved to an external server owned by Josh, to minimize the downtime.References:Issues: Yet more connectivity issueshttp://hphosts.blogspot.com/2010/11/issues-yet-more-connectivity-issues.html

Read More

Issues: Yet more connectivity issues

Oh joy. As if BT hadn't made things horrid to begin with, with outages sporadically over the past few weeks, it seems something has gone awry again today.Unfortunately, whilst the primary hpHosts server seems to be working, the rest are not, nor is the mail server (has a motherboard issue). I've done what I can from here, but won't actually have direct access to the servers until later this

Read More

Bredolab Takedown – Just the tip of the Iceberg

Recent reports from various sources in the security industry show that a large takedown of servers associated with the “Bredolab” trojan occurred within the past few weeks. While most of the reports have focused around the idea that this infrastructure was solely related to the command and control of Bredolab, our research shows that these servers were used as an all-purpose hosting

Read More