Black Hole Exploit Kit author’s ‘vertical market integration’ fuels growth in...
By Dancho Danchev Historical cybercrime performance activity of multiple gangs and individuals has shown us that, in order for them to secure multiple revenue streams, they have the tendency to...
View ArticleSpamvertised AICPA themed emails serve client-side exploits and malware
By Dancho Danchev Certified Public Accountants (CPAs) are a common target for cybercriminals. Throughout 2012, we intercepted several campaigns directly targeting CPAs in an attempt to trick them into...
View Article‘Please confirm your U.S Airways online registration’ themed emails lead to...
By Dancho Danchev In 2012, fake flight reservation confirmations and bogus E-ticket verifications were a popular social engineering theme for cybercriminals. On numerous occasions, we intercepted...
View ArticleMalicious DIY Java applet distribution platforms going mainstream
By Dancho Danchev Despite the fact that on the majority of occasions cybercriminals tend to rely on efficient and automated exploitation techniques like the ones utilized by the market leading Black...
View ArticleFake ‘ADP Speedy Notifications’ lead to client-side exploits and malware
By Dancho Danchev Over the past week, cybercriminals have resumed spamvertising fake “ADP Immediate Notifications” in an attempt to trick users into clicking on the malicious links found in the emails....
View ArticleCybercriminals release automatic CAPTCHA-solving bogus Youtube account...
By Dancho Danchev For years, thanks to the currently mature human-driven ecosystem offering CAPTCHA-solving as a service, cybercriminals have been persistently and automatically abusing major Web...
View Article‘Batch Payment File Declined’ EFTPS themed emails lead to Black Hole Exploit Kit
By Dancho Danchev Cybercriminals are currently mass mailing tens of thousands of emails, impersonating the EFTPS (Electronic Federal Tax Payment System), in an attempt to trick its users into clicking...
View ArticleCybercriminals resume spamvertising fake Vodafone ‘A new picture or video...
By Dancho Danchev Over the past 24 hours, cybercriminals resumed spamvertising fake Vodafone MMS themed emails, in an attempt to trick the company’s customers into executing the malicious attachment...
View ArticleLeaked DIY malware generating tool spotted in the wild
By Dancho Danchev How easy is it to create an undetected piece of malware these days? Too easy to be true! With more DIY malware botnets and DIY malware generating tools continuing to leak at public...
View ArticleEmail hacking for hire going mainstream – part three
By Dancho Danchev Just as we anticipated on two occasions in 2012, managed email hacking for hire services continue popping-up at publicly accessible cybercrime-friendly communities, a trend that’s...
View ArticleAndroid malware spreads through compromised legitimate Web sites
By Dancho Danchev Over the past 24 hours, our sensor networks picked up an interesting website infection affecting a popular Bulgarian website for branded watches, which ultimately redirects and...
View ArticleFake Intuit ‘Direct Deposit Service Informer’ themed emails lead to Black...
By Dancho Danchev Cybercriminals are currently spamvertising tens of thousands of fake emails, impersonating Intuit, in an attempt to trick its customers and users into clicking on the malicious links...
View ArticleFake LinkedIn ‘Invitation Notifications’ themed emails lead to client-side...
By Dancho Danchev LinkedIn users, watch what you click on! Over the past 24 hours, cybercriminals have launched yet another massive spam campaign, impersonating LinkedIn, in an attempt to trick its...
View ArticleNovice cybercriminals experiment with DIY ransomware tools
By Dancho Danchev For years, the DIY (do-it-yourself) trend has been evident across the entire cybercrime ecosystem. From the early exploits generating DIY tools that set the foundations for the...
View ArticleBogus ‘Your Paypal Transaction Confirmation’ themed emails lead to Black Hole...
By Dancho Danchev Financial institutions and online payment processors are a common target for cybercriminals, who systematically brand-jack and abuse the reputation of their trusted brands, in an...
View ArticleFake ‘FedEx Online Billing – Invoice Prepared to be Paid’ themed emails lead...
By Dancho Danchev Users of FedEx’s Online Billing service, watch out! Cybercriminals are currently mass mailing tens of thousands of emails impersonating the company, in an attempt to trick its...
View ArticleA peek inside a DIY password stealing malware
By Dancho Danchev On a daily basis, we continue to observe the emergence of the DIY (do-it-yourself) trend within the entire cybercrime ecosystem. And although the DIY activity cannot be compared to...
View ArticleMalicious ‘Facebook Account Cancellation Request” themed emails serve...
By Dancho Danchev In December, 2012, we intercepted a professional-looking email that was impersonating Facebook Inc. in an attempt to trick its users into thinking that they’ve received an “Account...
View ArticleFake Booking.com ‘Credit Card was not Accepted’ themed emails lead to malware
By Dancho Danchev Cybercriminals are mass mailing tens of thousands of emails, impersonating Booking.com, in an attempt to trick its users into thinking that their credit card was not accepted. Users...
View ArticleFake FedEx ‘Tracking ID/Tracking Number/Tracking Detail’ themed emails lead...
By Dancho Danchev On a daily basis, we intercept hundreds of thousands of fraudulent or malicious emails whose purpose is to either infect users with malicious software or turn them into victims of...
View Article