July 3, 2008
IntelliShield Analysis: Relaxing the rules for domain names and approved
character sets could open up new opportunities for Internet adoption, spur
business opportunities in an already-crowded domain namespace, and
internationalize DNS infrastructure, but there are also many potential
pitfalls. According to a recent report from KnujOn, a site devoted to
reducing unsolicited commercial e-mail, 90 percent of illicit domains
share the same 20 registrars.
(cisco.com)
Mystery Calls from 215-579-1035
Auto Warranty Insurance renewal scam
"A recorded voice called me on my cell to tell me my vehicle warranty was about to expire"
21 calls reported from this number.According to 4 reports the identity of this caller is Linda Wospil
Telemarketer: Auto Factory Warranty/File Complaint
July 2, 2008
It creates a local copy of itself called c:\windows\msvecurity.exe,
which is what gets executed.
(garwarner.blogspot.com)
July 1, 2008
eBay was ordered to pay nearly 40 million euro to a luxury goods company,
because it has allowed the sale of counterfeit goods. According to The
Press Association, the online auction site has to pay LVMH, which deals
with famous brands like Louis Vuitton, Givenchy, Fendi, Dior, Emilio Pucci
and Marc Jacobs, £30 million. eBay was accused of not checking the
authenticity of the products and allowed the sale of fake Louis Vuitton
handbags and Dior perfumes."
(efluxmedia.com)
June 30, 2008
Reporting on a Nevada Corporation, VeriResume, PhishBucket pointed out flaws in their job offers, and criticized how they appeared to do business. PhishBucket editor, Tabatha Marshall provided her research findings, suggesting that job seekers do their homework before giving away their personal information to this suspicious company. “VeriResume appeared to send emails in a manner that had all the hallmarks of a classic phishing scheme,” said Marshall.
...
It turns out that VeriResume is owned by Internet Solutions Corp. (ISC), and Alec Difrawy, who was formerly convicted of and sentenced for fraud. Author Les Henderson recently wrote a book called “Under Investigation,” which discussed Difrawy’s shady criminal past – including similar job agency schemes and allegations of horrific child abuse.
(phishbucket.org)
So once again we see an Internet company that seems to be owned by someone previously convited of fraud.
Anonymous Domain Sales: A Spammer's Delight
'Spam King' to pay $6 million to MySpace
Scott Richter is a Registrar?!?!
June 29, 2008
An anonymous reader writes "A GoDaddy Vice President has been caught
bidding against customers in their own domain name auctions. The employee
Adam Dicker isn't just any GoDaddy employee; he's head of the GoDaddy
subsidiary that controls the auctions. Dicker won some of the domains he
bid for, and pushed up the bid price on auctions he didn't win. The
conflict of interest is unethical
(tech.slashdot.org)
June 28, 2008
According to new rules unanimously passed by the Internet Corporation
for Assigned Names and Numbers, or Icann, at its meeting here, any
company, organization or country will soon be able to apply for a new
Web address extension, called a top-level domain.
The Icann board also passed another less controversial proposal that
would allow these domains to be registered in scripts other than Roman
characters, like Chinese, Arabic and Cyrillic. Specific countries could
receive the equivalent of their two-letter country code, like Bulgarias
.bg, in their native alphabet.
(nytimes.com)
Some folks think this will result in "no
change", but the no change we're concerned with is the lack of attention
to security issues by ICANN. It's entirely possible that the release of
these unique TLDs will not increase the level of criminality on the
Internet, but our issue is that the responsibility over the existing
structure has been sidestepped.
When a car company builds a new model they smash it into a wall 100
times to see what happens. I don't see this kind of forethought or
testing with the 'Net. The ability of the market to produce new
technology will always outpace the security structure's ability to
defend against abuses. How long did it take the banks to wake up to
phishing? How long did it take for law enforcement spread digital
forensics? How long did it take for networks to protect against viruses?
We're talking about years before efficient standard practices became
common place.
ICANN has fumbled the ball on it's two core responsibilities:
- Keep the Whois accurate - We all know it isn't
- Keep criminals from becoming registrars and registrars from becoming
criminals - See above and below
The unique TLD program seems like a diversion, rather than addressing
realistic concerns about fraud and abuse they're throwing candy and
coins to the crowd like Eva Peron.
June 27, 2008
OnLine Drug Danger - AC360 Daily Podcast: 06/25/2008
(cnn.com)
June 26, 2008
The ICANN and IANA websites were defaced earlier today by a Turkish group called "NetDevilz". ICANN is responsible for the global coordination of the Internet's system of unique identifiers. These include domain names, as well as the addresses used in a variety of Internet protocols. The Internet Assigned Numbers Authority (IANA) is responsible for the global coordination of the DNS Root, IP addressing, and other Internet protocol resources.
Their domains were redirecting to a hosting space at "atspace.com" where the defacers left the following message:
"You think that you control the domains but you don't! Everybody knows wrong. We control the domains including ICANN! Don't you believe us?"
(zone-h.org)
ICANN Asked To Shut Down "Worst" Chinese Registrar
PASSING THE SPAM BUCK - Why one report suggests registrars share the blame
Will ICANN take action against "worst" Chinese registrar?
Anonymous Domain Sales: A Spammer's Delight
70 Registrars are in mystery locations
"Worst Spam Offenders" Notified by ICANN
Most Spam Sites Tied to a Handful of Registrars
90% of the Illicit Sites Tracked by KnujOn Clustered at 20 registrars
June 25, 2008
Citizens of the Marshall Islands in the South Pacific have been left without a functioning email systems following a denial of service attack on the country's sole ISP.
It could take days to full restore service, the general manager of the Marshall Islands National Telecommunications Authority (NTA) told Radio New Zealand International. Systems at the monopoly carrier were taken offline by a flood of email traffic from compromised PCs.
(theregister.co.uk)
June 24, 2008
The report from StopBadware.org also showed a dramatic rise in China's role in the malware epidemic. Six of the 10 networks were internet service providers or backbone providers based in China and hosted more than 41 percent of the malicious websites.
The findings come a few weeks after anti-spam outfit Knujon released a separate report that found that almost 75 percent of spam sites were signed up by just 10 registrars. Once again, the three biggest offenders were located in China and included Xinnet Bei Gong Da Software, BEIJINGNN and Todaynic.
(theregister.co.uk)
June 22, 2008
On the eve of a crucial meeting for ICANN, the chairman of its Governmental Advisory Committee tells us what he expects the Paris meeting's main topics of discussion will be.
(domainesinfo.fr)
La liste noire des registrars
June 21, 2008
[KnujOn] also observed registrars, “not following up quickly when certain complaints are issued, not really engaging the consumer…” and “dismissing [their] concerns about fraud on the internet”. However, he does not lay blame on registrars alone. “ICANN shares some of the blame, he states. “They do have a responsibility/contractual obligation to do certain duties.” And that responsibility reaches farther, in his view, to ISP’s, and even companies victimized by online fraud “for not protecting their brands in an aggressive way.” He also strongly feels government agencies, too should do more—the FBI, the FDA—anybody responsible for overseeing any type of commerce.
(namesmash.com)
June 20, 2008
I verified that the samples (knujon) used to make this point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com, keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants.
All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot's "David Fox," whose listed Chinese phone number ended in seven zeroes and had an email address of "test@test.com."
Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus...
When asked for comment, the ICANN spokesperson issued the following statement:
"ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter."
(thestandard.com)
June 19, 2008
The
recent disclosure of the true ownership of PrivacyProtect.org in
SecurityFix has drawn praise, rancor and little spam. The comment section of
SecurityFix has been loaded up with gibberish messages like: "ktmjnw xdkjbsfmp vnac imsedkrah cmaon mhpeq lfdcenh" and
accusations that the Washington Post is run by the CIA.
Obviously there are some people who would rather we not discuss the anonymous ownership of anonymous registry services used
by fake pharmacies. Also, since this controversy started ICANN has stopped accepting complaints against PrivacyProtect-registered domains.
June 18, 2008
The gist of the latest KnujOn memo to ICANN is that Xin Net has over the last year
- hosted over 18,000 illicit domains, advertised in over 1.7 million unsolicited emails, and
- corrected exactly none of the 11,000 sites reported to ICANN by KnujOn
Even better, many of the illicit sites are fake pharmacies, and they are still active. And better than that, these sites were all registered by a handful of customers.
And, to add insult to injury, Xin Net is still registering 100 new illicit sites a day.
(weblog.infoworld.com)
June 17, 2008
Last Saturday, an arbitrator ordered Scott Richter, the president of online advertising and direct marketing firm Media Breakaway, to pay a stiff penalty to MySpace, including $1.2 million in legal fees.
The settlement is the second major one for Richter, who previously settled with Microsoft in August 2005 for $7 million. He was once considered one of the most prolific spammers, sending out over 100 million messages per day.
(betanews.com)
June 16, 2008
Spammers routinely register their sites under false names, or hijack someone else's identity to do so. But new research shows they're also paying for premium services when registering domain names to ensure a deeper level of anonymity...
Out of the 15,000 spam-advertised domains we examined, nearly half -- 7,142 names -- were registered through a Broomfield, Colo. company called Dynamic Dolphin. As I noted in my previous story, Dynamic Dolphin is the seventh most-popular registrar among spammers who provide patently false information in their public WHOIS records...
Dynamic Dolphin is owned by a company called CPA Empire, which in turn is owned by Media Breakaway LLC. The CEO of Media Breakaway is none other than Scott Richter, the once self-avowed "Spam King" who claims to have quit the business. Anti-spam groups also have recently implicated Media Breakaway in the alleged hijacking of more than 65,000 Internet addresses for use in sending e-mail and hosting commercial Web sites...
Dynamic Dolphin is a reseller of registrar services offered by an Indian company called Direct Information PVT Ltd. - also known as Directi and PublicDomainRegistry.com. Directi was the second most popular registrar among spammers who used privacyprotect.org; it handled the registration for nearly 4,000 of those 15,000+ domains that Knujon flagged...
(blog.washingtonpost.com)
June 14, 2008
SAN FRANCISCO — The onslaught of cellphone calls and e-mail and instant messages is fracturing attention spans and hurting productivity. It is a common complaint. But now the very companies that helped create the flood are trying to mop it up.(nytimes.com)
June 13, 2008
Senate Commerce Committee members Wednesday stressed the importance of striking the right balance with legislation to help fight secretly installed computer spyware and provide the FTC with the tools the agency needs to prosecute high-tech hackers.
(nextgov.com)
June 12, 2008
A new outbreak of SQL attacks began on the 8th. Not that they ever really go away, but new waves replace the old ones. The attackers are using a much larger number of domains than seen in previous months. Just 11 days into June, and already 54 of these domains have been observed. Many of these are previously suspended domains that registrars have released back to the attackers. The end result, some of the domains involved in the late May and early June attacks are now active again. Thus not only newly compromised sites are foisting the malware, but any sites previously compromised that have not cleaned up their pages (and properly parameterized their SQL queries) will now once again be serving as conveyor belts for password stealing trojans.(blog.scansafe.com)
June 11, 2008
ALBANY — - Online forums in which thousands of child-porn images have been posted have been stricken from three Internet providers, including two of the nation's five largest, New York Attorney General Andrew Cuomo said Tuesday.
(courant.com)
June 10, 2008
As part of our ongoing effort to ensure compliance and improve responsibility on the part
of Internet stakeholders KnujOn is posting the results of recent investigation of the
public disclosure of the locations of registrar companies. We have found 70 registrars listed on
the Internic registrar directory missing street addresses and/or phone numbers. More serious are
the following registrars that do not even have the country of location listed: EvoPlus Ltd.,
Hecta Media, Inc., Hostgator.com LLC, OnlineNIC, Inc., Thought Convergence, Inc., and Verelink, Inc.
This may merely be an oversight that can be corrected quickly, and I believe it should be. Full disclosure of this data will help transparency and trust. While registrants are required to disclose full contact data, the registrars should be held to the same standard.
This report was sent to ICANN and some of the data has already been corrected. The full list is below.
!!! BB Bulk, Inc. dba My Name Now
# 1 DotMobi Registrar, Inc.
10dencehispahard, S.L.
123 Registration, Inc.
8068 Registrar, Inc
A Mountain Domains, Inc.
A. W. B. Trading, Inc.
About Domain Dot Com Solutions Pvt. Ltd. d/b/a
Above, Inc.
Alibaba (China) Technology Co., Ltd.
Alisoft (Shanghai) Co., Ltd.
Anytime Sites, Inc.
AO Domains, Incorporated
Arctic Names, Inc.
Backslap Domains, Inc.
Best Bulk Register, Inc.
Black Ice Domains, Inc.
Blueweb, Inc.
Bottle Domains, Inc.
CodyCorp.com Inc.
Colorado Names Domains, Inc.
Commerce Island, Inc.
Cool Ocean, Inc.
Crisp Names, Inc.
Directi Internet Solutions Pvt. Ltd. d/b/a PublicDomainRegistry.com
DNGLOBE LLC
Domain Jingles, Inc.
DomainCannon.com LLC
Domerati, Inc.
Dootall, Inc.
Dotregistrar, LLC
Dotted Ventures, Inc.
Dynamic Dolphin, Inc.
ELB Group Inc
Emily Names Domains, Inc.
European NIC Inc.
EvoPlus Ltd.
Experian Services Corp.
FBS Inc.
Freeparking Domain Registrars, Inc.
Get SLD, Inc.
Good Luck Internet Services PVT, LTD.
Hecta Media, Inc.
Hostalia USA, Inc.
Hostgator.com LLC
Interdominios, Inc.
IPNIC, Inc
JJH Investments, LLC
Lazy Dog Domains, Inc
Naming Web, Inc.
NEEN.IT Inc., d/b/a namesprit.com
NetraCorp LLC dba Global Internet
NIC1, Inc
Oil Change Domains, Inc.
OnlineNIC, Inc.
Own Identity, Inc.
Pitchback Domains, Inc.
Pointag Technologies, Inc.
Slaphappy Domains, Inc.
Snowflake Domains, Inc.
Thought Convergence, Inc.
Threadagent.com, Inc.
Total Calories, Inc. dba Slim Names
united-domains AG
Valley Apples, Inc.
Verelink, Inc.
Walela Brook, Inc.
Western United Domains, Inc.
WGB Registry, Inc.
White Socks Domains, Inc.
June 9, 2008
Should they all be trusted at first sight by unsuspecting online users? Yes, unfortunately this is the case with the websites of renowned and respected IT security companies. However, now that are all vulnerable to cross-site scripting, the possibilities to get phished and infected with malware and crimeware are dramatically increased.
(xssed.com)
June 6, 2008
Who Will Rule The New Internet?(time.com)
While Josh Quittner asks a critical question in this Time article he focuses too much on the technology and misses
completely the various political power struggles going on in the background that are pulling and pushing on the Internet.
The issues of crime, safety, privacy, espionage and control are going boil up on the Internet in ways that Time
has not considered. In the end it may be the lawyers who control the Internet and not programmers.
June 5, 2008
LegitScript Internet pharmacy verification standards have been recognized by the National Association of Boards of Pharmacy (NABP).
LegitScript’s mission is to assist consumers and businesses in determining which Internet pharmacy websites operate safely and in compliance with Federal and state laws and regulations, as well as with accepted medical standards and ethics.
Over the next several months, LegitScript.com will be adding functionality to our website that will give consumers the ability to compare prices for specific prescription drugs from LegitScript-approved Internet pharmacies.
(legitscript.com)
June 4, 2008
SAN JOSE, Calif. -- When surfing the Internet for safe Web sites, not all domains are equal. Companies that assign addresses for Web sites appear to be cutting corners on security more when they assign names in certain domains than in others, according to a report to be released Wednesday by antivirus software vendor McAfee Inc.
McAfee found the most dangerous domains to navigate to are ".hk" (Hong Kong), ".cn" (China) and ".info" (information).
(washingtonpost.com)
June 3, 2008
ENISA (the European Network and Information Security Agency) presented a report estimating that spam cost Europe €27 billion in 2007, and represents a growing threat with the danger of a 'digital 9/11' on the horizon. The group called on the EU to improve efforts to combat the spam menace, including greater funding for anti-spam initiatives, a more unified approach to tackling spam, and the implementation of mandatory intrusion reporting systems.
Meanwhile the Internet Corporation for Assigned Names and Numbers (ICANN), the body responsibly for maintaining the structure of the internet, had also been raising their efforts to reduce spam. Following the publication of a report suggesting that the vast majority of spamvertised sites are hosted at domains administered by a small number of registrars, the ICANN group responded by contacting the named bodies and threatening to revoke their license to register domain names should they fail to take action to clean up their areas of the web. ICANN has a long-running system for registering complaints against specific domains, and claims to chase up over 75 issues per month with similar enforcement notices. ICANN's announcement, and the KnujOn organisation, who first drew attention to the clustering.
(virusbtn.com)
June 1, 2008
To track and investigate suspicious employment-related email offers.
To work with law enforcement to stop confirmed scams.
To provide help and resources to victims of employment scams.
To make the Internet a safer place.
(phishbucket.org)
May 30, 2008
ICANN sent a notice of breach to ICANN-accredited registrar Red Register, Inc. based on Red Register, Inc.'s failure to comply with the Uniform Domain Name Dispute Resolution Policy ("UDRP"). Specifically, Red Register failed to comply with UDRP Rule 16(a) and paragraph 4(k) of the UDRP despite repeated requests by ICANN and the National Arbitration Forum (“NAF”). These rules require registrars to communicate plans to implement UDRP Provider decisions and implement those decisions.
Consistent with the breach provisions of the Registrar Accreditation Agreement ("RAA"), ICANN requested that Red Register, Inc. act within 15 days to cure the cited breaches. If Red Register, Inc. fails to cure the breaches cited in ICANN’s notice of breach, ICANN will pursue all remedies available under the terms of the RAA, including termination.
The ICANN Board adopted the UDRP and UDRP Rules on 26 August 1999. In addition, ICANN approved the form of implementation documents on 24 October 1999. The RAA requires all accredited registrars to comply with board adopted Consensus policies.
As part of ICANN’s ongoing work to develop and maintain a tough, but fair, contractual compliance program designed to create an even playing field for registrars and registries, ICANN:
- Conducts registrar and registry audits to assess compliance with contractual terms;
- Conducts registrar and registry investigations after receiving information indicating that contract violations have occurred;
- Publishes a monthly newsletter to provide information regarding contractual compliance program activities at http://icann.org/compliance/newsletter/index.htm; and
- Assists thousands of consumers in resolving domain name-related complaints annually.
For more information about the Contractual Compliance Program mission and other details, please visit http://www.icann.org/compliance.
(icann.org)
Notice to Red Registrar Inc.
May 29, 2008
WASHINGTON, May 29 (UPI) -- The non-profit association that oversees Internet addresses is trying to crack down on shady Web pages used by spammers and hackers...
"It's a huge problem," said Burnette, declining to give more detailed figures on the numbers of registrants reported to have submitted inaccurate or incomplete information.
"If we find that registrars are not investigating reports (of inaccurate or non-existent WHOIS data) as they are required to, our escalation procedure can ultimately result in their accreditation being terminated," effectively shutting them down, she said.
(upi.com)
ICANN looks to lend a hand in spam fight (betanews.com)
May 28, 2008
In early May Representative Edward J. Markey (D-MA), chairman of the House Subcommittee on Telecommunications and the Internet, joined Reps. John D. Dingell (D-MI), chairman of the Energy and Commerce Committee, and 14 other members of the committee in sending a letter to Department of Commerce Secretary Carlos M. Gutierrez regarding possible changes to ICANN.
The letter was written over their concerns for a major change in the Department of Commerce's (DOC) relationship with ICANN.
(technewsreview.com.au)
ICANN slaps registrars who help criminals (avertlabs.com)
ICANN takes action against spam havens (gcn.com)
ICANN Puts eNom and Moniker “On Notice” (domainnamewire.com)
Top ten worst spam registrars notified by ICANN (blogs.zdnet.com)
May 27, 2008
In an effort to continue highlighting concerns at specific providers we will focus
on each company listed in
KnujOn top 10 of the worst spam-related registrars.
ICANN responded Friday to this list
which included Xin Net as #1.
Xin Net has been the focus of controversy and efforts at CastleCops recently
and is heavily connected to Fast Flux
operations as evidenced by this
analysis at the Università degli Studi di Milano. Xin Net accounts for 75% of the Fast Flux traffic.
The University of Milan Dipartimento di Informatica e Comunicazione
has found 10,570 malicious domains at Xin Net connected to Fast Flux. KnujOn's Xin Net illicit domain count
is fast approaching 30,000. Much of this traffic and spam
advertises "Canadian Pharmacy" type sites as seen below:
May 26, 2008
Mexico's northern border town of Juarez, infamous for its history of drug-related violence, has gone into lockdown after an e-mail began circulating warning of an unparalleled "bloodbath" in the coming days.
Shops, bars and restaurants have shut and soldiers are patrolling the streets, giving a surreal and dangerous tone to this city of 1.4 million people which sits just across the US border from the Texan town of El Paso.
Authorities are taking seriously the anonymous e-mail, which menaced "the bloodiest and most violent weekend in the history of Juarez."
The place is already reeling from a surge in murders that has claimed around 400 lives so far this year, several of them police officers and members of rival narcotics gangs.
The US embassy to Mexico has told US citizens that the message represented a "potential threat" and that public places, nightspots and the main streets in Juarez should all be avoided.
(breitbart.com)
May 25, 2008
BAGHDAD - He is everywhere but nowhere, an unseen geek whose skills as a software pirate are so impressive that others are now pirating his work.
more stories like this
Posters and pamphlets promoting his latest DVD, Anas08, hang in shop windows and flap in the breeze on vendors' tables wherever computer equipment is sold in Baghdad.
Looking for a new version of Adobe Photoshop, Microsoft Office, or an online edition of the Koran, complete with English translation and an index to topics and verses? They're all on the Anas08 disc, available for about $3, compared with the thousands of dollars it would cost to buy the 390 programs individually through authorized dealers.
This story reminded me of something. Like many folks I know people serving overseas and send them care packages. I asked
one serving in Iraq: "Do you want any DVD movies?" to which he responded: "No, we've got them all, they sell them on the street
for pennies and before they are even out in the U.S." Shocked but not surprised I asked him what else to they sell?
Everything. Office, Server2007, Dreamweaver. Pirated media and software is bountiful everywhere but it gave me pause
to think about soldiers loading them onto their laptops or watching movies on them in a war zone. What else is on those disks?
May 24, 2008
The Homeland Security Department’s Science and Technology Directorate has awarded a contract to Secure64 Software to increase the security of the Internet’s Domain Name Servers (DNS).
DNS is one of the most critical back-end processes on the Internet or any other IP network, but it operates somewhat transparently. DNS alleviates the burden of memorizing a Web site’s IP address, instead allowing the user to type in a simple domain name such as www.dhs.gov. The Internet would not be functional from a practical perspective without DNS.
But despite its importance, most DNS implementations are not secured, leaving DNS transactions vulnerable to attacks such as pharming, cache poisoning and DNS redirection. (usdoj.gov)
May 23, 2008
In order to clarify the system for dealing with incorrect “Whois” domain name registration information, and deal with community concern, ICANN is releasing the following information regarding its compliance work.
MARINA DEL REY, Calif.: ICANN has sent enforcement notices and notices of concern to certain registrars, including those reported this week as being the registrars for the majority of websites advertised in spam emails.
Earlier this week, an investigation by
KnujOn, widely reported online,
publicly identified 10 registrars
as being the companies used to register the majority of domain names that have since appeared in spam email messages.
More than half of those registrars named had already been contacted by ICANN prior to publication of KnujOn’s report, and the remainder have since been notified following an analysis of other sources of data, including ICANN’s internal database.
With tens of millions of domain names in existence, and tens of thousands changing hands each day, ICANN relies upon the wider Internet community to report and review what it believes to be inaccurate registration data for individual domains. To this end, a dedicated online system called the Whois Data Problem Report System (“WDPRS”) was developed in 2002 to receive and track such complaints.*
"ICANN sends, on average, over 75 enforcement notices per month following complaints from the community. We also conduct compliance audits to determine whether accredited registrars and registries are adhering to their contractual obligations," explained Stacy Burnette, Director of Compliance at ICANN.** "Infringing domain names are locked and websites removed every week through this system."
Although the majority of registrars offer excellent services and contribute to the highly competitive market for domains, ICANN’s compliance department has developed an escalation process to protect registrants and give registrars an opportunity to cure cited violations before ICANN commences the breach process.
However, while registrars are responsible for investigating claims of Whois inaccuracy, it is not fair to assume a registrar that sponsors spam-generating domain names is affiliated with the spam activity. A distinction must be made between registrars and an end user who chooses to use a particular domain name for illegitimate purposes.
"But if those registrars, including those publicly cited, do not investigate and correct alleged inaccuracies reported to ICANN, our escalation procedure can ultimately result in ICANN terminating their accreditation and preventing them from registering domain names," Ms Burnette said.
(icann.org)
May 22, 2008
BUCHAREST, ROMANIA – Thirty-eight individuals with ties to international organized crime have been charged in two separate indictments involving computer and credit card fraud schemes, Deputy Attorney General Mark R. Filip, Romanian Prosecutor General Laura Codruþa Kövesi, U.S. Attorney for the Central District of California Thomas P. O’Brien and Acting U.S. Attorney for the District of Connecticut Nora R. Dannehy announced today. The Deputy Attorney General made the announcement with the Romanian Prosecutor General to highlight the extensive and continued cooperation between the two countries in addressing these types of international crimes. The announcement comes less than one month after U.S. Attorney General Michael B. Mukasey announced the Department’s new Law Enforcement Strategy to Combat International Organized Crime.
(usdoj.gov)
May 21, 2008
BY COL. CHARLES W. WILLIAMSON III:
The world has abandoned a fortress mentality in the real world, and we need to move beyond it in cyberspace. America needs a network that can project power by building an af.mil robot network (botnet) that can direct such massive amounts of traffic to target computers that they can no longer communicate and become no more useful to our adversaries than hunks of metal and plastic. America needs the ability to carpet bomb in cyberspace to create the deterrent we lack.
(afji.com)
May 20, 2008
Knowing that a minority of companies control most of the sites advertised in spam helps put the junk email problem into better
perspective. To illustrate this consider a typical spam campaign. The emails are generated by tens of thousands of malware compromised
machines and networks on the Internet. They send millions of spam messages to millions of victims. Sounds like a big problem, right?
Not exactly. Because the number of actual websites advertised in those millions of messages is rather small in comparison
the derivative of a spam campaign is seriously reduced. Reducing the true size even further is the fact that these real websites
are held by one or maybe two registrar companies per campaign. Imagine that a spam campaign is a balloon. A balloon is
actually made of a very small amount of real material, it only appears bigger because it's full of hot air. The huge
volume of sent spam messages is the hot air that pushes the boundaries the Internet's resources, making the problem look bigger
than it is. However, the air only stays in the balloon because it is knotted at the bottom. The registrars are this knot.
Discuss the Spam Balloon
Spam domains use small number of registrars (heise-online.co.uk)
May 19, 2008
So who are the top 10 registrars most favored by spammers? You can see the list along with Knujon's
methodology here.
A few of the names on it are unsurprising simply by virtue of their market share. Number five -- Bellevue, Wash.,
based eNom -- is the second largest registrar, according to DomainTools's registrarstats.com.
Number six -- Pompano Beach, Fla., based Moniker -- has the eighth largest market share among registrars.
But size doesn't explain most of the names on the list. The registrars that scored the worst overall -
Xinnet Bei Gon Da Software, BEIJINGNN, and Todaynic -- are all located in China, and are 18th, 47th
and 99th in terms of market share, respectively.
Perhaps the most interesting name on the list is number 7 - a registrar out of Broomfield, Colo.,
called Dynamic Dolphin. According to Knujon, more than 10 percent of the company's 45,000-plus domains
have false WHOIS data, and more than 17 percent of the domains registered through the company have been
observed being advertised through spam.
A bit of digging into Dynamic Dolphin revealed that it is owned by a company called CPA Empire, which in
turn is owned by Media Breakaway LLC. Those of you who read
this post
a few weeks back will recognize
this company: Its CEO is Scott Richter,
a notorious, self-avowed spammer who claims to have quit the business.
As I noted in that post, anti-spam groups claim that Media Breakaway recently hijacked more than 65,000 IP
address for use in sending e-mail and hosting commercial Web sites.
(blog.washingtonpost.com/securityfix/)
May 18, 2008
GMER is an application that detects and removes rootkits. It scans for: hidden processes, hidden threads, hidden modules, hidden services, hidden files, hidden Alternate Data Streams, hidden registry keys, drivers hooking SSDT, drivers hooking IDT, drivers hooking IRP calls, inline hooks
(gmer.net)
May 17, 2008
RootkitRevealer is an advanced rootkit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect rootkits like Fu that don't attempt to hide their files or registry keys).
(technet.microsoft.com)
May 16, 2008
The Federal Trade Commission's just-approved new rule provisions for the
CAN-SPAM Act largely place the onus on e-mail marketers and their
affiliates to take responsibility for clean e-mail lists and clear
communication among marketing partners.
(dmnews.com)
May 15, 2008
AntiEvilTools Project is a non-governmental voluntary organizations of the Forum(www.antiprotect.com) with the purpose of the open-source security software category.
It is built on open-source enthusiasm of the participants on the basis of the study,You may see it as a study exchange the platform. In here , there are Kernel driver development experts, but also familiar algorithm programmer ,more full of learning enthusiasm of students at school.You only need the part which will participate in you by the demo form to submit n0bele@163.com .Once through the audit, you will see all AntiEvilTools source code.
(rootkit.com)
May 14, 2008
Three men have been indicted for hacking into a number of cash registers at Dave & Buster's restaurant locations nationwide to steal data from thousands of credit and debit cards, data that was later sold or used to cause more than $600,000 in losses, the Justice Department said this week.
(blog.washingtonpost.com/securityfix)
May 13, 2008
A recent report by security software maker Symantec reveals that spam accounted for an average of 80 percent of traffic hitting e-mail gateways in April, spiking as high as 87 percent at times. That is a daunting figure, but Garth Bruen of KnujOn looks at the problem in a different way.
According to a study being presented this week by KnujOn to the High Technology Crime Investigation Association, 90 percent of the illicit Web sites using spam to generate traffic are clustered on just 20 registrars — that is only 2.5 percent of the 800 registrars accredited by the Internet Corporation for Assigned Names and Numbers.
That can make the spam problem seem almost manageable.
(gcn.com)
Strategic Developer | Martin Heller: "20 registrars control 90% of illicit domains, says Knujon"
(weblog.infoworld.com)
May 12, 2008
Upload your file for testing here: virustotal.com
VirusTotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines.
Specs: Free, independent service, Use of multiple antivirus engines, Real-time automatic updates of virus signatures, Detailed results from each antivirus engine, Real time global statistics
(virustotal.com)
May 11, 2008
90% of the illicit sites tracked by KnujOn.com are clustered at just 20 registrars which is only 2.5% of the entire registrar population. While networks of compromised spam generators, "bot-nets" are large and millions of spam emails are constantly sent, the number of final destination websites is considerably smaller, and the number of sponsors of those domains is even more concentrated.
(prweb.com)
This is just one of the issues we will be discussing at the
Ohio HTCIA Chapter
2008 Spring Training Conference
Monday May 12 at 3:30pm in H-1095 and Tuesday May 13 at 10:30 in H-1095 in the Clocktower building at
Lakeland Community College
(Full Schedule).
What is the HTCIA?
"The High Technology Crime Investigation Association (HTCIA) is designed to encourage,
promote, aid and effect the voluntary interchange of data, information, experience,
ideas and knowledge about methods, processes, and techniques relating to investigations
and security in advanced technologies among its membership." (htcia.org)
May 10, 2008
Cellphones have become consumers’ most personal technological devices. Some industry executives, along with consumer groups and security experts, are concerned that unwanted text messages on phones will be an even greater headache than unwanted computer messages.
Cellphone spam is particularly annoying to its recipients because it is more invasive — announcing itself with a beep — and can be costly.
(nytimes.com)
|%2020%20Registrars%20(90%)&chtt=Illict%20Sites%20by%20Registrar&chco=0000ff)
May 8, 2008
There are over 800 ICANN Accredited Registrars and thousands of ISPs. Most providers are playing by the rules. The ones that are not adhering to policy are wreaking the most havoc across the web. Some
of these providers merely have poor verification or auditing, others may be active partners to illicit activity and KnujOn is sorting out just which is which. What this means is that all the zombie-bot generated spam is intended to drive your attention to a very small subset of the Internet's infrastructure.
The problem looks bigger than it really is. In short, the fake pharmacies, knockoff product websites, pirate software stores,
phony lending institutions - the websites where the transactions occur - are generally under the control of a small number of companies.
Products sold on these sites have a sordid history and those behind
these operations have helped pushed illicit traffic profits into the hundreds of billions of dollars per year.
To clarify this relationship it is important to understand that the botnets are huge, the smaller population being referred to here are the actual
advertised landing sites. It gets confusing when everyone is talking about "sources" and various numbers. Let's take this as an example:
A botnet with 100,000 machines sends a 2 million message email blast (example, not real numbers). The spam massages actually only
reference 200 - 500 URI links. The URIs are often redirects that boil down to only 100 - 200 real domains, and 90% of these domains are
controlled by 2.5% of the registrar population. So, we've got lots of senders, lots of messages, but they are herding victims into a very small corral.
To be part of the solution, send your junk email to: knujon@coldrain.net.
May 7, 2008
There are many approaches to deal with forgotten passwords. All rely either on proving access to some resource (such as a pre-registered email account), or on
the long-term memory of the person who needs to restore access to his or her account. Most approaches are not very secure, and many are hard for legitimate
users to manage. To make it worse, many approaches are unsuitable for input-constrained devices, such as mobile phones.
It is well known in the cognitive science literature that personal preferences are more stable than long-term memory. A system based on personal preferences is
also less vulnerable to data-mining attacks than one that relies on more traditional facts (such as mother's maiden names or childhood address). We propose a
system that is secure and practical: It takes less than thirty seconds to authenticate (whether on a computer or a handheld), and has a false negative rate of close
to 0% and a false positive rate of less than 1%. For many environments, Blue Moon Authentication may very well be the best approach there is.
(ravenwhite.com)
May 6, 2008
MySpace has won a lawsuit against notorious spammer Sanford (Spamford) Wallace. The social networking website gained a default judgment against Wallace after he failed to turn over documents or appear in court, CNet reports. (theregister.co.uk)
May 5, 2008
Spam celebrates its 30th birthday on Saturday (3 May).
On that day in 1978, 393 Arpanet subscribers were sent what's reckoned to be the first ever spam email1 in history (the message itself was written on 1 May 1978).
DEC marketing rep Gary Thuerk came up with the wheeze which produced a fierce backlash from Arpanet (military) administrators, as well as a small number of sales.
After first appearing on Arpanet, unsolicited bulk commercial ads moved over to Usenet, email and websites links. Much to the chagrin of Hormel Foods, the term spam was applied to the phenomenon in a pop-culture reference to the spam skit from Monty Python's Flying Circus, where all meals in a restaurant come with spam, spam and more spam. Junk email - not nourishing luncheon meat - has become the principal meaning of the word spam.
(theregister.co.uk)
At 30, Spam Going Nowhere Soon - Audio (npr.org)
May 4, 2008
May 3, 2008
For companies like Microsoft, domain tasting creates the constant headache of chasing after typo-squatters — those who create and register Web sites with misspelled variations of the Microsoft name. For individual users, it means that millions of names are tied up in a constant churn of registering and returning names before fees are charged.
Now Icann — the Internet Corporation for Assigned Names and Numbers, the organization based in California that manages domain names — is considering steps to stamp out the practice.
The board of Icann will vote in Paris in June on a proposal to severely limit the number of domain names that can be returned without a fee, but the organization is facing resistance from domain name registrars, who are against ending the grace period.
These companies, which are licensed to register and sell new domain names, are themselves divided on the issue. Some argue that domain tasting is eroding consumer trust. Others insist that the grace period allows time to correct registrations that were spelled incorrectly.
(iht.com)
May 2, 2008
Some of the common tests used by Web sites to distinguish between legitimate flesh-and-blood visitors and malicious human-mimicking computers recently appear to have been outwitted.
Last month, the human verification tests, which typically require users to identify deformed letters set against a cluttered backdrop, were broken by a computer. The computer then repeatedly created free Hotmail e-mail accounts and sent spam from them, according to Websense, the security firm that detected the hacking.
(washingtonpost.com)
May 1, 2008
Many people are switching from Internet Explorer to alternative browsers such as Firefox and Safari. Though that might make them feel more secure, the shift has also opened new doors for bad guys.
...
So forget the idea that just because you've switched to a new browser, you're magically safer. You may be for a time, but to stay safe with any software, you need to keep current with fixes.
(washingtonpost.com)
April 30, 2008
There are dozens of video clips on the Web site YouTube showing teens getting high smoking or chewing salvia, a hallucinogenic herb related to sage and mint.
The clips show young people laughing, and claiming to see walls melting before their eyes. The drug is legal in all but six states.
According to the National Drug Intelligence Center, users typically experience vivid hallucinations, out-of-body experiences and feelings of merging with inanimate objects.
Salvia is not only legal, it is readily available.
(wtov9.com)
Hallucinogenic Herb Called Salvia Could Be the 'New Marijuana,' and Florida Lawmakers Might Ban It (foxnews.com)
Legal status of Salvia divinorum (wikipedia.org)
Salvia divinorum (wikipedia.org)
April 29, 2008
Some customers may think writing the terms on the panel on the back of the cards would deter fraud or forgery. But Visa's rules for merchants say that "In reality, criminals don't take the time to practice signatures: They use cards as quickly as possible after a theft and prior to the accounts being blocked. They are actually counting on you not to look at the back of the card and compare signatures - they may even have access to counterfeit identification with a signature in their own handwriting."
(boston.com)
April 28, 2008
According to FORTUNE magazine one of the world's
shrewdest and wealthiest investors has a bellow average credit rating. Why? Someone took out a loan in
his name at a Nevada HSBC bank and never paid it back. Famous victims of identity theft have
included Paul Allen, Steven Spielberg
George Lucas, Oprah Winfrey, Ross Perot, and Michael Bloomberg.
April 27, 2008
The Internet is slowly inching closer to ratcheting up the security of its Domain Name System (DNS) server architecture: The Internet Corporation for Assigned Names and Numbers (ICANN ) plans to go operational with the secure DNS technology, DNSSEC, later this year in one of its domains.
(darkreading.com)
April 26, 2008
High street chains will be the next victims of cyber terrorism, some of the world's elite hackers have warned.
They claim it is only a "matter of time" before the likes of Tesco and Marks & Spencer are targeted.
Criminals could use the kind of tactics which crippled Estonia's government and some firms last year, they warned.
(news.bbc.co.uk)
April 25, 2008
This story is disturbing. In what was described as a "common practice," White House staff and others attending a meeting with President Bush left their BlackBerrys sitting unattended on a table outside the meeting room. With the meeting in progress, a Mexican press attaché decided to lift six or seven of them and make a run for it. Thankfully, the Secret Service was able to catch him before he got too far. What I want to know is, what are government BlackBerrys doing sitting on an unprotected table?
(informationweek.com)
April 24, 2008
The use of cyberspace to target U.S. victims and infrastructure, jeopardizing the security of personal information, the stability of business and government infrastructures and the security and solvency of financial investment markets.
The manipulation of securities exchanges and engaging in sophisticated fraud schemes that rob U.S. investors, consumers and government agencies of billions of dollars.
(cnn.com)
April 23, 2008
OnGuardOnline.gov provides practical tips from the federal government and the technology industry to help you be on guard against Internet fraud, secure your computer, and protect your personal information.
(onguardonline.gov)
A partnership between the federal government and the technology industry
(APWG is a partner) to help consumers be on guard against Internet fraud, secure
their computers, and protect their personal information. The new videos also are
featured at
youtube.com/ftcvideos and on the FTC site at
ftc.gov.
April 22, 2008
The hackers that broke into Hannaford Brothers, a northeast U.S. grocery chain, may have spawned other attacks, including one at Okemo Resorts in Ludlow VT. As law enforcement and forensic experts continue to sift through the evidence of these attacks, the retailer and the ski resort remain mum on further developments.
(bankinfosecurity.com)
April 19, 2008
LONDON, England (CNN) -- If a vintage Ferrari for $30,000 sounds too good to be true, that's probably because it is.
But when a counterfeit classic is so good that even the experts are impressed, some buyers just can't resist the object of their desire at a knockdown price.
(cnn.com)
Video
April 17, 2008
Uncle Sam wants you—to help defend against Internet threats. But is the military any place for slackers and hackers? (businessweek.com)
April 16, 2008
SAN FRANCISCO — An e-mail scam aimed squarely at the nation’s top executives is raising new alarms about the ease with which people and companies can be deceived by online criminals.
(nytimes.com)
April 15, 2008
The US homeland security chief has made a heartfelt plea to Silicon Valley workers to stand up and be counted in the fight to secure the cyber highway.
Michael Chertoff invoked the attacks of 9/11 as he sought to galvanise IT professionals and security experts.
(news.bbc.co.uk)
April 14, 2008
In November 2006, the Federal Trade Commission held a huge conference on the challenges that American consumers would face in the next "Tech-Ade." The groan-inducing title aside, the event was a chance for the Commission staff to hear from assorted technology experts about the key issues that the FTC would have to police over the next ten years. Now, a year and a half after the conference, the Commission has finally written up (PDF) the "major trends identified at the hearings." They are old news by now (social networking is hot!), but the document does give us some insight into FTC priorities; hopefully, the Commission can deliver on its goals of ensuring consumer data privacy, monitoring behavioral advertising, and working globally to combat spam and spyware.
(arstechnica.com)
April 11, 2008
A new cybercrime book that KnujOn creator Garth Bruen helped edit and review is available. We highly recommend
Crimeware: Understanding New Attacks and Defenses, by Markus Jakobsson and Zulfikar Ramzan.
Available at
Amazon, Informit, oreilly
Crimeware: Understanding New Attacks and Defenses will help security professionals, technical managers, students, and researchers understand and prevent specific crimeware threats. This book guides you through the essential security principles, techniques, and countermeasures to keep you one step ahead of the criminals, regardless of evolving technology and tactics. Security experts Markus Jakobsson and Zulfikar Ramzan have brought together chapter contributors who are among the best and the brightest in the security industry. Together, they will help you understand how crimeware works, how to identify it, and how to prevent future attacks before your company’s valuable information falls into the wrong hands. In self-contained chapters that go into varying degrees of depth, the book provides a thorough overview of crimeware, including not only concepts prevalent in the wild, but also ideas that so far have only been seen inside the laboratory.
With this book, you will
- Understand current and emerging security threats including rootkits, bot networks, spyware, adware, and click fraud
- Recognize the interaction between various crimeware threats
- Gain awareness of the social, political, and legal implications of these threats
- Learn valuable countermeasures to stop crimeware in its tracks, now and in the future
- Acquire insight into future security trends and threats, and create an effective defense plan
With contributions by Gary McGraw, Andrew Tannenbaum, Dave Cole, Oliver Friedrichs, Peter Ferrie, and others.
April 10, 2008
(AP) Attorney General Michael Mukasey warned Friday that the huge profits
generated from piracy and counterfeiting are increasingly flowing into the
coffers of terrorist groups. In remarks to Silicon Valley executives at
the Tech Museum of Innovation, Mukasey said the economy and national
security of the United States are increasingly threatened by violations
involving copyrighted software code, patented inventions and trademarked
properties. Terror groups are taking their cues from organized crime and
increasingly funding their operations from counterfeiting and piracy, he
said. Mukasey said his department is devoting more resources to
prosecuting intellectual property crimes, which led to a 7 percent
increase in the number of IP cases filed in 2007 over the year before and
a 33 percent increase over 2005. "Criminal syndicates, and in some cases
even terrorist groups, view IP crime as a lucrative business and see it as
a low-risk way to fund other activities," Mukasey said. "A primary goal of
our IP enforcement mission is to show these criminals that they're
wrong."...
(cbsnews.com)
April 9, 2008
The State Department official in charge of U.S. passport services stepped
down yesterday amid investigations into security breaches in the document
records and overcharges for blank passports. In the latest blow against
the agency, court documents show a State Department employee provided
personal information from passport applications for use in a credit-card
fraud scheme. Deputy Assistant Secretary for Passport Services Ann Barrett
left her post yesterday, a move that State Department Spokesman Tom Casey
attributed to management changes. The personnel move comes after The
Washington Times first reported last month that three State Department
contract employees were being investigated for improperly accessing the
passport data of three presidential candidates. The Times also has
reported on overcharges for blank passports produced by the U.S.
Government Printing Office... (washingtontimes.com)
April 8, 2008
Webroot estimates over 42,000 spam emails for every single business email
account in 2008 (ciol.com)
April 7, 2008
The online behavior of a small but growing number of computer users in the United States is monitored by their Internet service providers, who have access to every click and keystroke that comes down the line.
The companies harvest the stream of data for clues to a person's interests, making money from advertisers who use the information to target their online pitches.
(washingtonpost.com)
April 6, 2008
Technical analysis of the Phorm online advertising system has reinforced an expert's view that it is "illegal".
(news.bbc.co.uk)
April 5, 2008
Internet crime is at an all time high, according to figures from the FBI, which said that losses totalled $240m last year.
The agency's Internet Crime Complaint Center (IC3) received 206,884 complaints of web-based crimes in the US last year, and said that total losses had risen by $40m compared to the previous year.
"The internet presents a wealth of opportunity for would-be criminals to prey on unsuspecting victims, and this report shows how extensive these types of crime have become," said FBI Cyber Division assistant director James E. Finch.
(vnunet.com)
April 4, 2008
WASHINGTON (AP) — Money lost in Internet-related crimes hit a new high last year, topping about $240 million, according to a government report showing increases in scams involving pets, check-cashing schemes and online dating.
The number of reported Internet scams dropped slightly from previous years, but the total lost jumped $40 million, according to the report released Thursday by the FBI and the National White Collar Crime Center.
(ap.google.com)
April 3, 2008
Spam continues to blight e-mail exactly 15 years after the term was first coined and almost 30 years since the first spam message was sent.
The term is thought to have been coined by Joel Furr, an administrator on the net discussion system Usenet, to refer to unsolicited bulk messages.
More than 90% of all e-mail is spam, according to anti-spam body Spamhaus.
(bbc.co.uk)
April 2, 2008
Framingham retailer TJX Cos. reached a settlement with MasterCard Inc. in which it will pay up to $24 million to banks and other institutions to cover fraud losses stemming from a massive data breach disclosed last year.
TJX, parent of discount retain chains including TJ Maxx and Marshalls, struck a similar deal with rival card network Visa in which it agreed to pay up to $40.9 million. As in that deal, TJX said the costs of its MasterCard settlement are included in the $256 million the company has set aside to pay for computer work and other costs associated with the breach.
(boston.com)
April 1, 2008
When the U.S. Federal Trade Commission announced a US$2.9 million settlement with online marketing firm ValueClick this month, it was a record monetary settlement under the 4-year-old CAN-SPAM Act...
But despite these recent court cases, some critics don't see a lot of value in CAN-SPAM, short for Controlling the Assault of Non-Solicited Pornography and Marketing.
"CAN-SPAM has had virtually no impact on the spam problem at large," said Ray Everett-Church, a longtime spam fighter and director of policy and professional services at Habeas, a company that provides e-mail authentication services.
Archived Stories
KnujOn Earns Second Place at MIT Spam Conference
ORDB anti-spam blacklist lists everything
U.S.-Based ISPs Count Known Terror Groups as Clients
MIT Spam Conference Continues...
Knujon to be presented at MIT Spam Conference
Lots of Spam en Español!
KnujOn Outlook Reporting Widget(macro) Posted
KnujOn to be Presented at MIT SpamConfernce
FBI Opens Probe of China-Based Hackers
Be on the lookout for tax return scams
Hannaford's Breach Exposes 4.2M Credit, Debit Cards
Missing emails dog business users after Xtra's shift to Yahoo
CAN-SPAM violations cost online ad firm $2.9 million
Men's Health Magazine Hijacked to Sell Fake Pharma
Ukrainian CyberCrime Boss Leads Political Party
Trend Micro hit by massive Web hack
Man dubbed "spam king" pleads guilty to three charges
It's not always a virus
Drugs easy to get at 'rogue' sites online
Chinese hackers: No site is safe
Mac attack: Vendors mull security software for OS X
Porn spammer brought to book, US companies pays up for violations
Pxxx peddlers and spammers are upping their assault on Google Groups
More than a million more users were duped by phishing attacks last year, compared to the year before.
Spammer loses free speech argument
YouTube Gets Slammed for Video Showing British Mom's Gang Rape
It's Tax time!
Most spam comes from just six botnets
Virginia court upholds prolific spammer's conviction
US 'Spam King' faces prison
Cybersquatters launch 10,000 attacks a week on top brands
Hotmail Problems Caused Outage Worldwide
Comcast on FCC defense, File-sharing rules roil critics at Harvard
Pakistan move knocked out YouTube
Taliban threatens Afghan mobile telecom companies
Cops Sue Cops over Domain Names
Hackers Recruit for Local Language Skill
Increasing trend in underlying criminality for financial gain in the area
of cybercrime set to continue throughout 2008.
Malicious Advertising (Malvertising) Increasing
Quebec cops bust massive botnet ring
Federal government falling short on cybercrime
The changed face of cybercrime
Man arrested for sending 2.2 billion spam emails in Tokyo
RIM's co-CEO downplays BlackBerry outage
Malicious programs hit new high
Cyberthieves go phishing to rob banks
Russia becomes spam superpower
Spammers Go Old School as Gimmicks Fail
Europe still top source of spam
Judge orders end to weight-loss, anti-aging spam operation
Prison Sentences for Ringleaders of Global Software Counterfeit Syndicate
Sentencing
signals the end of Taiwan-based operation, the largest known
producer and distributor of fake Microsoft products in the world from 1997
to 2003.
US Attorney Seizes $1 Billion For Victims
Special Investigation: The Hidden War on Australia
Do-it-yourself phishing kit targets email, social networks
Nigeria's Drug Czarina Risks Death to Take on Counterfeiters
Make Your Thunderbird Work Against Spam
Internet Hookers Gear up for Super Bowl
Internet failure hits two continents
International gang hacks into Texas bank
Free music service hits snag;Songs will play on iPods despite Apple's DRM
MySpace Nightmare: Cyberbullies Hijack Florida Teen's Page
Rogue Trader Held in French Bank Scandal
FBI: Craigslist Used In Murder-For-Hire Case
Disgruntled Worker Accused of Deleting $2.5 Million of Files
China shut 44,000 porn Web sites in 2007 - report
Hackers target aspiring Internet scammers
Listing of recent cybercrime related arrests
Five years in prison for takeover of online bank account
Military industrial complex aims to revamp email
CIA Says Hackers Have Cut Power Grid
Do Our Courts Understand Cybercrime?
Yahoo! CAPTCHA Hacked
Craftier Trojan Invades 10,000 Web Sites, Stumps Security Pros
MySpace, states move to block sex offenders
Mystery Calls from (303) 296-2573
Cells, texting give predators secret path to kids
Facebook hit by adware attack
vnunet.com analysis: The malware 'shadow economy'
Phishing attacks slam midmarket
Mey v. Herbalife International, Inc., et al.
Microsoft’s SkyDrive beta abused by spammers.
Computer Forensics Faces Private Eye Competition
U.S. Gov ID Theft Resource Pages
Alan Ralsky indicted
US indicts 11 over pump-and-dump stock spam
Who Is Really Monitoring Your Domain Searches?
Example of double spam sent to mailboxes and mailing lists
Romanian Authorities Arrest 9 of 22 Defendants Charged in Organized Crime Group
News from 2007 has been archived
News from 2006 has been archived
News from 2005 has been archived
|
