Category Archives: Stupid malware tricks

Phishing Scheme Targets E-Payment Rule-Maker, NACHA

By Andrew Brandt

Coming on the heels of similar fraud schemes that targeted victims using the names of such familiar institutions as the FDIC, IRS, and HMRC, scammers are trying to get people to infect their own computer using a different organization’s name—one that is probably unfamiliar to most people. NACHA is a not-for-profit association that [...]

Rogues Mug Big Bird on his Birthday

By Andrew Brandt

In a move sure to raise the ire of Sesame Street fans everywhere, the black hat SEO gangs that have been manipulating Google results for the better part of the year have seized on a new target from which they’ve launched their current salvo of rogue antivirus guano. That’s right, the lovable, giant [...]

Lazy Phishers Just Email the Phishing Web Page to You, Now

By Andrew Brandt

It was a particularly busy weekend for spammers, especially the creepy, evil ones who are trying to steal information (as opposed to the merely scungy pill vendors and their ilk). Webroot’s Threat Research team has recently seen a glut of phishing messages which, like most, purport to come from banks and ask you to update your [...]

Outlook “Patch” Spam Leads to Keyloggers

By Andrew Brandt

Hot on the heels of the spam campaigns involving emails which purport to come from the IRS, HMRC, and from your IT department comes another round of fake “notification” spam emails — this time, warning users to download and install a patch for the Outlook and Outlook Express email clients.
Like the previous rounds, [...]

Spammers Use Bing to Bypass Filters, Spam Bad Links

By Andrew Brandt

Word came down from our Threat Research team this morning about a new spam campaign that uses upstart Bing search engine’s own redirection mechanism to bypass spam filters and send undesirable links over email. On top of that, the spammers are also abusing MySpace’s lnk.ms link shrinking system to further obfuscate the destination that [...]

Trojan Uses Commercial Firewall to Block AV Updates

By Andrew Brandt

Purveyors of rogue security products continue to bulk up their arsenal of stupid tricks, all of which are designed to induce either fear or frustration in victims. Increasingly, certain distributions of rogue antivirus include a payload that blocks the infected computer from receiving antivirus updates. That part isn’t new; Many Trojan installers drop [...]

IRS Tax “Warning” Fraud Crosses the Pond, Targets the UK

By Andrew Brandt

For several months, we’ve been seeing spam and phishing Web sites which purport to be IRS notifications of delinquent non-payment of income taxes. Who can blame the fraudsters — almost no three letter agency of the US government inspires more dread and fear than good old Internal Revenue.
In the UK, the counterpart to [...]

Postmortem Michael Jackson Track Dredges Rogues

By Andrew Brandt

As we’ve discussed so many times in the past, search terms that include the names of celebrities make good targets for malware authors, and search terms that include the name of dead celebrities make great targets for malware authors. Now there’s a new corollary to this postulate: Search terms that include the names [...]

Shields Up During National Cyber Security Awareness Month

By Mike Kronenberg

Be suspicious. About email swindles, bogus security products and online scams. I’m not kidding around. You need to pay attention and be diligent, because cyberthreats are lurking everywhere.
What got me thinking about this was President Obama’s proclamation of October as National Cyber Security Awareness Month. He said that all users — not just [...]

No Search is Sacred: Fakealerts Flood the Net

By Andrew Brandt

Search engines appear to be no longer in control of the search results they display at any given moment. That’s bad news not only for the search giants, but for anyone who relies on their results.
How can that be? After all, it’s the search engines’ own servers that are supposed to deliver relevant [...]