Millions of harvested U.S government and U.S military email addresses offered for sale


By Dancho Danchev

Remember the underground service offering millions of harvested emails for sale profiled at the Webroot Threat Blog in January?

It appears  that cybercriminals are continuing to innovate in this underground market segment by offering geolocated databases of millions of harvested emails for better targeting in their upcoming spam campaigns.

In this post, I’ll profile yet another cybercrime underground  service selling millions of harvested emails to potential cybercriminals.

Continue reading

New service converts malware-infected hosts into anonymization proxies


By Dancho Danchev

What happens when a host gets infected with malware? On the majority of occasions, cybercriminals will use it as a launch platform for numerous malicious activities, such as spamming, launching DDoS attacks, harvesting for fresh emails, and account logins. But most interestingly, thanks to the support offered in multiple malware loaders, they will convert the malware-infected hosts into anonymization proxies used by cybercriminals to cover their Web activities.

In this post, I’ll profile a newly launched service, offering thousands of malware-infected hosts as Socks4 and Socks5 servers for anonymizing a cybercriminal’s Web activities.

Continue reading