Last week it was reported that the Pushdo botnet, used to send spam using the Cutwail spamming module, was taken down, thanks to the efforts of several security researchers. Thirty command-and-control (C&C) servers of the Pushdo/Cutwail botnet were identified, almost 20 of which were taken down after their Internet hosting providers were notified. So far, [...]
Post from: TrendLabs | Malware Blog – by Trend Micro
Pushdo Takedown Damages Botnet
I recently came across a round of spammed instant messages that arrived via my Yahoo! Messenger account. These messages were supposedly sent from my cousin’s account, and used the following format and were sent to everyone on her friends list: The familiar message format told me that I was chatting with a bot that wanted [...]
Post from: TrendLabs | Malware Blog – by Trend Micro
“IQ Test” Spam Proliferating via Instant Messages
A spammed message supposedly from Newegg, a popular online computer hardware/software seller has been found in the wild. It informs users that their online purchase has been charged to their Visa card. It also contains two clickable links that point to the same malicious page, an example of which is http://{BLOCKED}nthenet.net/1.html. Clicking the link leads [...]
Post from: TrendLabs | Malware Blog – by Trend Micro
Blogspot Mail2Blogger Secret Email Address Used in Spam Attack
TrendLabs received a recent spammed message that uses fake news about the death of Hollywood celebrities and famous athletes. The spam came in two varieties: one has a .ZIP file attachment that contains the malicious file news.exe that is detected as TROJ_DLDER.AU. TROJ_DLDER.AU connects to a certain URL to, in turn, download TROJ_BREDOLAB.XY. The other [...]
Post from: TrendLabs | Malware Blog – by Trend Micro
Fake Celebrity Deaths Used in Malicious Spam Run
Sometimes not cleaning up your own backyard — and responding to abuse requests — can be costly when an ISP ends up on the Spamhaus Block List (SBL), as one particular Latvian hoster, Microlines.LV, has recently discovered. Chris Williams explains the situation today in The Register. The Spamhaus SBL generally lists blocks of IP addresses [...]
Post from: TrendLabs | Malware Blog – by Trend Micro
Spamhaus Listing Rightfully Lists Latvian Hoster
