Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

Alert: please treat these domains with extreme caution

Originally spotted via this blog entry (you’ll see SpywareSucks cited in the comments). Putting aside the fact that the author of the blog is completely wrong to claim that Google was blocking biggovernment.com because of “bad publicity”, we can be grateful that the author has brought some malvertizing...

Posted to Spyware Sucks by sandi on Sat, Jan 2 2010
Filed under: Filed under: Malvertizing
ALERT: Please treat the following domains with extreme caution

advertisingcommunity-s.com ICANN Registrar: DIRECTI Created 2 November 2009 IP: 217.23.10.16 - Worldstream, Netherlands. Registrant hidden behind Privacy Protect, dedicated hosting. Implicated in malvertizing incidents before: http://www.mywot.com/en/scorecard/advertisingcommunity-s.com ***** adrime...

Posted to Spyware Sucks by sandi on Thu, Dec 31 2009
Filed under: Filed under: Malvertizing
Malvertizing at tweetmeme.com?

Wayne Small, the owner of sbsfaq.com called me today and asked me to look into a malvertizing incident that he experienced while at tweetmeme.com. You can see his report here . I have not been able to reproduce the behavior that Wayne saw thus far, but do note that tweetmeme seems to be...

Posted to Spyware Sucks by sandi on Mon, Dec 28 2009
Filed under: Filed under: Malvertizing, Fraudware
ALERT: Please treat content from these domains with caution…

cdn-adrotation.com cdn-businessweek.com cdn-gamingahead.com cdn-justin.tv cdn-ovguide.com cdn-thestreet.com cdn-transworld.net cdn-veoh.com pdnads.com The Registrants are all hidden behind Domains By Proxy, Inc, all domains are hosted at IP 74.81.169.61 (carohosting.net), all were registered using Godaddy...

Posted to Spyware Sucks by sandi on Thu, Dec 17 2009
Filed under: Filed under: Malvertizing
FTC versus Innovative Marketing et al - developments

As we know, Jain's legal counsel have applied for leave to withdraw as his attorneys of record. They have not been given permission to withdraw yet, and the deadline for Jain to respond to the FTC's renewed motion for sanctions was nigh, therefore Jain's counsel has filed a document...

Posted to Spyware Sucks by sandi on Tue, Nov 17 2009
Filed under: Filed under: Malvertizing, Fraudware
FTC versus Innovative Marketing et al - Sam Jain's legal counsel request leave to withdraw as attorneys of record

In a not unsurprising development, legal counsel for Sam Jain have petitioned the Court for permission to withdraw as attorneys for Sam Jain. The FTC does not oppose the request, but does object to any further extension of Mr Jain's time to respond to the FTC's pending Renewed Motion for...

Posted to Spyware Sucks by sandi on Sun, Nov 15 2009
Filed under: Filed under: Malvertizing, Fraudware
FTC versus Innovative Marketing et al - developments

Innovative Marketing and Daniel Sundin are still unrepresented. 09/16/2009 ORDER denying Motion of Marc D'Souza to Dismiss the Complaint. DIRECTING D'Souza to answer the complaint within 20 days. Signed by Judge Richard D Bennett on 9/16/09. " Viewing the totality of the allegations through...

Posted to Spyware Sucks by sandi on Tue, Nov 10 2009
Filed under: Filed under: Malvertizing, Fraudware
Ponderings about the incident that hit Gizmodo (courtesy of Gawker)

While I was on holidays, a malvertizing incident hit Gizmodo (via advertising sold to Gawker). The miscreants impersonated the legitimate advertising agency Spark Communications, registering the domain spark-smg.com (the real domain is sparksmg.com) to assist in the impersonation. Publicis have...

Posted to Spyware Sucks by sandi on Mon, Nov 9 2009
Filed under: Filed under: Malvertizing
I have received the Microsoft MVP Award – for the 11th time

I received an email today advising me that I have been awarded Microsoft MVP status for the 11th time. Unlike my previous 10 awards, this time I have been awarded Microsoft MVP under the specialty “Consumer Security: Training” instead of as an Internet Explorer MVP. I think that is...

Posted to Spyware Sucks by sandi on Fri, Oct 2 2009
Filed under: Filed under: General stuff, Malvertizing
ALERT: Please treat content from extrabanner.com with extreme caution

Regular readers will recognize the domains t.banner09092.com and blackwater-cuprumworks.net – they were the domains used to attempt infection of computers via various security exploits: http://msmvps.com/blogs/spywaresucks/archive/2009/09/12/1722754.aspx Luckily, the domain blackwater-cuprumworks...

Posted to Spyware Sucks by sandi on Sun, Sep 20 2009
Filed under: Filed under: Malvertizing
Ponderings about the New York Times malvertizing incident

It has been all over the popular press – the New York Times web site had been tricked into accepting a malvertizement that was hijacking some visitors to that site and dumping them at a web site touting fake security software. And, in a move that is kind of unusual, the New York Times web site...

Posted to Spyware Sucks by sandi on Tue, Sep 15 2009
Filed under: Filed under: Malvertizing, Fraudware
ALERT: Please treat content from trendbanner.com with extreme caution

It has been implicated in the facilitation of malvertizing that attempts to infect computers via PDF exploit The way it works is as follows: ad.trendbanner.com uses document.write to load the JS content at banner.pushbanner769.info banner.pushbanner769.info displays an advertisement, but also...

Posted to Spyware Sucks by sandi on Sat, Sep 12 2009
Filed under: Filed under: Vulnerabilities, viruses and exploits, Malvertizing
Alert: please treat content from kennedales.com with extreme caution

I have received information that kennedales.com has been implicated in a malvertizing incident. I noted in my last blog post that kennedales.com shares IP address with two other domains that have already been caught facilitating malvertizing but at that time had not received intelligence indicating...

Posted to Spyware Sucks by sandi on Thu, Sep 10 2009
Filed under: Filed under: Malvertizing
Another two bad domains: newadsresults.com and waveadvert.com

Seen distributing malvertizing at starnewsonline.com: http://forums.starnewsonline.com/eve/forums/a/tpc/f/6431032365/m/7121097019/r/9841029019 And collegehumor.com: http://www.facebook.co.za/CollegeHumor And tigerdroppings.com: http://www.tigerdroppings.com/rant/messagetopic.asp?p=14780012&pg=1 And...

Posted to Spyware Sucks by sandi on Wed, Sep 9 2009
Filed under: Filed under: Malvertizing
ALERT: The gogomediacenter.com incidents continue

I have a few more domains for you… mediadison.com ICANN Registrar: BIZCN.COM, INC Created 6 July 2009 IP: 212.117.166.77, Luxembourg, Root Esolutions Sharing IP with the following domains, all of which should be treated with extreme caution: 2ez4clicks.com, denrifiox.com, monsteradhost.com, newage...

Posted to Spyware Sucks by sandi on Sun, Sep 6 2009
Filed under: Filed under: Malvertizing
ALERT: Please treat the domains gogomediacenter.com, sys17media.com and praharesorts.cn with extreme caution

It is very interesting to watch the modus operandi that the bad guys are using change. This malvertizement was NOT seen on a web page; rather it was being displayed by an advertising supported freeware application. The trouble starts when an ad.yieldmanager.com GET retrieves content, in an iframe, from...

Posted to Spyware Sucks by sandi on Fri, Sep 4 2009
Filed under: Filed under: Malvertizing
ALERT: Impersonation of legitimate advertising networks and companies

This investigation began after I was alerted to the fact that somebody has been posing as a Vonage representative, and using the domain vonage-inc.com while doing so. The domain vonage-inc.com was created on 5 August 2009, and the ICANN Registrar is BIZCN.COM, Inc. It is hosted by Root Esolutions...

Posted to Spyware Sucks by sandi on Thu, Sep 3 2009
Filed under: Filed under: Malvertizing
ALERT: More malvertizing via Facebook applications?

Last time it was “Human Gifts” (aka Owned) that I wrote about on August 3: ALERT- Malvertizing on Facebook and gaiaonline.com This time it is the “We’re Related” application – an incident reported on August 18 http://community.tigranetworks.co.uk/blogs/tim_long/archive/2009/08/18/drive-by-downloads...

Posted to Spyware Sucks by sandi on Tue, Aug 25 2009
Filed under: Filed under: Malvertizing
Malvertizement featuring careerbuilder.com

Thankfully it tries to load content from a known bad domain that is not responding.

Posted to Spyware Sucks by sandi on Thu, Aug 20 2009
Filed under: Filed under: Malvertizing
FTC versus Innovative Marketing et al – developments: Innovative Marketing and Daniel Sundin

An Order of Default was entered against Innovative Marketing and Daniel Sundin on 6 August 2009 “ for want of answer or other defense ” . Regular readers will know that Innovative Marketing and Daniel Sundin have ignored the FTC action right from the start, and are unrepresented. Innovative Marketing...

Posted to Spyware Sucks by sandi on Tue, Aug 11 2009
Filed under: Filed under: Malvertizing, Fraudware

Page 1 of 5 (89 items) 1 2 3 4 5 Next >

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.

Recent Posts

Tags

Browse Blog Posts by Tags