article thumbnail

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Krebs on Security

Launched in 2008, privnote.com employs technology that encrypts each message so that even Privnote itself cannot read its contents. Other Privnote phishing domains that also phoned home to the same Internet address as pirwnote[.]com The real Privnote, at privnote.com. And it doesn’t send or receive messages. com include privnode[.]com

Phishing 210
article thumbnail

The Link Between AWM Proxy & the Glupteba Botnet

Krebs on Security

Launched in March 2008, AWM Proxy quickly became the largest service for crooks seeking to route their malicious Web traffic through compromised devices. ru , and the website web-site[.]ru com shows that in 2008 it displayed the personal information for a Dmitry Starovikov , who listed his Skype username as “lycefer.”

Passwords 235
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. com was registered in 2008 to an Adrian Crismaru from Chisinau, Moldova. SocksEscort[.]com DomainTools says myiptest[.]com

Malware 197
article thumbnail

Who’s Behind the ‘Web Listings’ Mail Scam?

Krebs on Security

Cached versions of weblistingsinc.org at archive.org show logos similar to the one featured on the Web Listings mailer, and early versions of the site reference a number of “business partners” in India that also perform SEO services. A cached copy of Mark Scott’s blog Internet Madness from 2011 promotes Web Listings Inc.

Scams 254
article thumbnail

Why Malware Crypting Services Deserve More Scrutiny

Krebs on Security

Those records indicate the user Kerens registered on Verified in March 2009 from an Internet address in Novosibirsk, a city in the southern Siberian region of Russia. Ironically, Verified has itself been hacked multiple times over the years, with its private messages and user registration details leaked online.

Malware 212