New spam over Skype: Russian meetic opt out? ...

Veille sécurité

Par Philippe V.

Once again, I was not even expecting to get a sample that way... Here is the message I received on one of the Skype accounts I use as 'honeypots' (one day ago): I never requested in any way to receive such ads! Okay so let's go to 'dreams-lady'. To be...

Lire la suite

New scam 419... over Skype?

Veille sécurité

Par Philippe V.

I was honestly not expecting it. I recently found out that one of my Skype accounts had received an offline message, from an unknown contact (meaning I hadn't accepted myself!) Here is a screenshot of it: At the time of writing (24 hours after I received...

Lire la suite

New Facebook fake with malware spreading, over MSN

Veille virale

Par Philippe V.

This is not the first, but I find this case quite interesting. Some PC that were formerly compromised (I don't know the malware details at the time of writing) started around 6PM UTC to send messages to their MSN contacts. Here is a sample of the message:...

Lire la suite

Norton 360 / 2010: new scareware? | nouveau Norton, mêmes méthodes douteuses

Veille sécurité

Par Philippe V.

I'd heard that Norton (I mean the last version) has improved quite a lot . It is said to be less system resource consuming, and more efficient. On my part, I spent almost 5 years cleaning computers that were supposed to be protected by Norton... (and...

Lire la suite

New scam 419 on viadeo | nouveau scam 419 sur viadeo

Veille sécurité

Par Philippe V.

Quelquefois, pas besoin de chercher pour qu'un élément malveillant à analyser pour qu'un ben échantillon vienne à moi. Les mauvaises langues diront que ce sont tous mes pots de miel qui sont derrière ce constat... pas à tout à fait faux. Bref, en lisant...

Lire la suite

suspicious NetBT request teamscrew: BotNet C&C on ADSL box?

Veille virale

Par Philippe V.

I was not even really monitoring the LAN when I noticed strange requests... Why strange? because of the following: - Netbios over TCP protocol whereas the proxy should handle that kindda name resolution (part of web requests) - broadcast name query, spreading...

Lire la suite

CC number stealer, fake MSN webcam

Veille virale

Par Philippe V.

Recently, a new contact requested me to add her/him as a new MSN one. Even if I did not recognize the address, I accepted the invitation. This was for analysing purpose, I do NOT recommend any people to do the same! Anyway, here is the contact: altagraciatehney09...

Lire la suite

Zango's come back: new MSN accounts stealer?

Veille virale

Par Philippe V.

Years ago, when I started to study viral threats, I discovered Zango. Zango used viral technologies to spread and remain resident on compromised computers. I won't give a new talk about the past Zango, search engines will on their own if you wanna try....

Lire la suite