SEARCH RESULTS
 
Showing 1-6 of 6 records
1
 
Expand article

Phishing Tactics Evolving

The Article has images
2008-04-21 11:18:17 by HASH0x85bed5c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...halifax-online.co.uk/ mem bin/halifax LogIn/formslogin.aspsource=halifaxcouk stolnick-8marta-8b-r1-c1-45.ekb.unitline.ru /halifax-online.co.uk/ mem bin zux006-052-125.adsl.green.c h/onlineid/cgi-bin/onlineid.bankofamerica/sso.login.controller rrcs-74-218-5-6.central.biz.rr.com...
 
Tags: halifax-online, halifax, mem binformslogin, user, user-142o3ds, web application vulnerabilities, mem binhalifax loginformslogin, vulnerable sites, turkish defacement
 
 
 
 
Expand article

RBN's Phishing Activities

The Article has images
2008-02-27 13:20:49 by HASH0x8b05fb8 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...halifax.php 81.95.149.226/scm/uk/rbsdigital/index.html 81.95.149.226/scm/uk/co-operative/index.html 81.95.149.226/scm/uk/cahoot.php Known malware to have been connecting to 81.95.149.226 Trojan-PSW.Win32.LdPinch.bno, Trojan-Downloader.Win32.Small.emg, Trojan.Nuklus , where the malware detected under different names by multiple vendors is the...
 
Tags: rbn, html, historical screenshot, screenshot, rbn urls, network, russian business network, nuklus production speaks, nuklus
 
 
 
 
Expand article

All You Need is Storm Worm's Love

The Article has images
2008-05-20 07:46:40 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...halifax.com limpodrift.cn loveinlive.cn newoneforyou.cn normocock.cn orthelike.com supersameas.com thingforyoutoo.cn One of the domains that is injected as an iFrame is using ns.likenewvideos.com as DNS server, whereas likenewvideos.com is currently suspended due to "violating Spam Policy". Precisely Related posts Social Engineering and...
 
Tags: storm worm, storm worm malware, malware, likenewvideos, campaign, valentine campaign, orthelike, domains, sql injection
 
 
 
 
Expand article

Price Discrimination in the Market for Stolen Credit Cards

The Article has images
2008-06-03 07:23:29 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...Halifax/Between 20k 180k/450 Nationwide/Between 15k - 230k/450 Lloyds TSB/Between 10k - 400k/600 How they come up with these prices remains a subject to speculation, what's important to point out is that in between the price discrimination used here on a good that in reality is a commodity good, is that they're cashing-in on the high profit...
 
Tags: price, price discrimination, volume basis, basis, market, average price, bank basis, volume basis propositions, credit card
 
 
 
 
Expand article

Underground Multitasking in Action

The Article has images
2008-06-23 09:20:41 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...Halifax, locally hosting blackhat SEO junk pages redirecting to rogue security software, redirecting to multiple live exploit URLs through javascript obfuscations, as well as to fake casinos and fake celebrity video sites - all from a single location This risk-forwarding process for all the malicious and criminal activities to the owner of...
 
Tags: malicious, malicious domains, party, malicious party, php, multiple javascript obfuscations, javascript obfuscations, malicious activities, casino adware
 
 
 
 
Expand article

Facebook Malware Campaigns Rotating Tactics

The Article has images
2008-08-27 10:04:51 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...halifax-cnline.co.uk parked at 216.52.184.243, 69.64.145.229 and 69.64.145.229, known badware IPs related to previous fraudulent activity Moreover, cross-checking this campaign with another Facebook malware campaign enticing users to visit whitneyganykus.blogspot .com where a javascript obfuscation redirects to absvdfd87 .com and from...
 
Tags: malware campaign, successful malware campaign, facebook, facebook malware campaign, campaigns, campaign, campaigns based, trust factor, trust
 
 
 
 
 
Showing 1-6 of 6 records
1
 
TOP SEARCH
Expand / MinimizeClose Widget
  •  
RECENT SEARCH
Expand / Minimize
  •  
RELATED VIDEO
Expand / Minimize
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia