ips | DataProtectionCenter.com – Tech and Security

Javascript Obfuscation in “Canadian Pharmacy” Spam Sites

15

Dec

2012

I’ve been hunting fake “Canadian Pharmacy” sites since last week and managed to find thousands of unique domains associated with this scam. I have some fun points to share as part of my tips in hunting these: Recently, most of fake Canadian Pharmacy sites are using “medic”, “health” and “doctor” keywords in their domain names […]

Category Security Written by Blue Coat 0 Comments

promotesmetasearch.net promotes malware

15

Nov

2012

From the WeAreSpammers blog: This looks like a fake get-rich-quick scam email which is actually intended to distribute malware. Originating IP is 5.39.101.233 (OVH, Germany). Spamvertised domains are 8mailer.com on 5.39.101.225 (OVH, Germany) and promotesmetasearch.net on 46.249.38.27 (Serverius Holding, Netherlands). This last one is kind of interesting, because a) it’s all in French and b) […]

Category Security Written by Dynamoo's Blog 0 Comments

Wire Transfer spam / webmoniacs.ru

03

Nov

2012

This fake wire transfer spam leads to malware on webmoniacs.ru: Date: Fri, 2 Nov 2012 06:23:10 +0700From: “service@paypal.com” [service@paypal.com]Subject: RE: Wire Transfer cancelled Dear Sirs, The Wire transfer was canceled by the other bank. Canceled transaction: FED REFERENCE NUMBER: 628591160ACH34584 Transaction Report: View The Federal Reserve Wire Network The malicious payload is […]

Category Security Written by Dynamoo's Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘ips’

Javascript Obfuscation in “Canadian Pharmacy” Spam Sites

promotesmetasearch.net promotes malware

Wire Transfer spam / webmoniacs.ru

Categories

Featured

Archives

Latest Comments

About Us

Contact Us