Remove Advertising Remove DNS Remove Web Fraud
article thumbnail

Scam ‘Funeral Streaming’ Groups Thrive on Facebook

Krebs on Security

Recently, these scammers have branched out into offering fake streaming services for nearly any kind of event advertised on Facebook. net for DNS. xyz is currently hosted at a Bangladeshi web hosting provider named cloudswebserver[.]com com , but historical DNS records show this website also used DNS servers from webhostbd[.]net.

Scams 65
article thumbnail

‘Tis the Season for the Wayward Package Phish

Krebs on Security

One of dozens of FedEx-themed phishing sites currently being advertised via SMS spam. com — from a desktop web browser redirects the visitor to a harmless page with ads for car insurance quotes. “It is a nearly perfect attack vector at this time of year,” Morton said. com, g001bfedeex[.]com, com, and so on.

Phishing 345
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

15-Year-Old Malware Proxy Network VIP72 Goes Dark

Krebs on Security

The first mention of VIP72 in the cybercrime underground came in 2006 when someone using the handle “ Revive ” advertised the service on Exploit, a Russian language hacking forum. And it stands to reason that VIP72 was launched with the help of systems already infected with Corpse’s trojan malware.

Malware 311
article thumbnail

Who’s Behind the Botnet-Based Service BHProxies?

Krebs on Security

BHProxies sells access to “residential proxy” networks, which allow someone to rent a residential IP address to use as a relay for their Internet communications, providing anonymity and the advantage of being perceived as a residential user surfing the web. 5, 2014 , but historic DNS records show BHproxies[.]com

article thumbnail

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Krebs on Security

Privnote’s ease-of-use and popularity among cryptocurrency enthusiasts has made it a perennial target of phishers , who erect Privnote clones that function more or less as advertised but also quietly inject their own cryptocurrency payment addresses when a note is created that contains crypto wallets.

Phishing 255
article thumbnail

No SOCKS, No Shoes, No Malware Proxy Services!

Krebs on Security

That is a far cry from the proxy inventory advertised by 911, which stood at more than 200,000 IP addresses for rent just a few days ago. According to Constella Intelligence [currently an advertiser on KrebsOnSecurity], Oleg used the same password from his iboss32@ro.ru Image: Spur.us. Cached copies of angrycoders[.]net

Malware 298
article thumbnail

Phishers are Angling for Your Cloud Providers

Krebs on Security

One source who had at least two employees fall for the scheme forwarded KrebsOnSecurity a response from UR’s privacy division, which blamed the incident on a third-party advertising partner. “The phishing email contained links to a purported invoice that, if clicked on, could deliver malware to the recipient’s system. .

Phishing 219