Remove 2014 Remove DNS Remove Internet Remove Web Fraud
article thumbnail

Who’s Behind the Botnet-Based Service BHProxies?

Krebs on Security

BitSight researchers found significant overlap in the Internet addresses used by those domains and a domain called BHproxies[.]com. The account didn’t resume posting on the forum until April 2014. Shotliff said he sold his BHProxies account to another Black Hat World forum user from Egypt back in 2014. com on Mar.

article thumbnail

Why Malware Crypting Services Deserve More Scrutiny

Krebs on Security

guru’s registration records also are hidden, yet passive domain name system (DNS) records for both cryptor[.]biz Those records indicate the user Kerens registered on Verified in March 2009 from an Internet address in Novosibirsk, a city in the southern Siberian region of Russia. The registration records for the website Cryptor[.]biz

Malware 224