article thumbnail

The Link Between AWM Proxy & the Glupteba Botnet

Krebs on Security

Launched in March 2008, AWM Proxy quickly became the largest service for crooks seeking to route their malicious Web traffic through compromised devices. ru , and the website web-site[.]ru com shows that in 2008 it displayed the personal information for a Dmitry Starovikov , who listed his Skype username as “lycefer.”

Passwords 267
article thumbnail

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Krebs on Security

Launched in 2008, privnote.com employs technology that encrypts each message so that even Privnote itself cannot read its contents. The real Privnote, at privnote.com. And it doesn’t send or receive messages. Creating a message merely generates a link.

Phishing 239
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Apple AirTag Bug Enables ‘Good Samaritan’ Attack

Krebs on Security

In 2008, a cyber attack described at the time as “the worst breach of U.S. A USB stick with malware is very likely how U.S. and Israeli cyber hackers got the infamous Stuxnet worm into the internal, air-gapped network that powered Iran’s nuclear enrichment facilities a decade ago.

Mobile 342
article thumbnail

Why Malware Crypting Services Deserve More Scrutiny

Krebs on Security

” DomainTools shows this website was registered in 2008 to a Yuri Churnov from Sevastpol, Crimea (prior to Russia’s annexation of Crimea in 2014, the peninsula was part of Ukraine). The WHOIS records for autodoska[.]biz

Malware 237
article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

com was registered in 2008 to an Adrian Crismaru from Chisinau, Moldova. SSC asked fellow forum members for help in testing the security of a website they claimed was theirs: myiptest[.]com com , which promised to tell visitors whether their proxy address was included on any security or anti-spam block lists. DomainTools says myiptest[.]com

Malware 208
article thumbnail

Who’s Behind the ‘Web Listings’ Mail Scam?

Krebs on Security

If we go back further to 2008 and look at Mark Scott’s profile on Blogger.com , we can see at the bottom of the page a link called “Enquiries and Emails.” ” Visiting that link brings up what looks like a public shaming page of emails apparently sent to Mr.

Scams 270