Pill spammer database released

Post Reply
User avatar
alphacentauri
Posts: 1670
Joined: Mon Nov 02, 2009 12:52 pm

Pill spammer database released

Post by alphacentauri » Fri Feb 25, 2011 12:10 am

Brian Krebs' security blog has a good article today:
http://krebsonsecurity.com/2011/02/spam ... s-exposed/
As a result of infighting among Russian spammers, the customer and affiliate records of the prolific spammers behind "Canadian Pharmacy" have been distributed to antispam activists who then provided it to law enforcement agencies and to Krebs, a free lance reporter with a popular blog.

One of the images shows Krebs has blurred lines in the screen shot that contained the names, phone numbers, and email addresses of the customers who ordered drugs from the site.

http://krebsonsecurity.com/wp-content/u ... dioces.png

Presumably if the spammer sent the file halfway around the world to an antispammer he knew only by reputation, he's shared it with quite a few of his friends and criminal associates, too.

People who order from these pharmacies often have the mistaken idea that they have more privacy than if they went to a real doctor and a real pharmacy in their own community. You see them posting on forums, howling in protest about getting persistent calls from phone marketers trying to sell them more drugs after they have placed an initial order -- somehow, they are surprised by this.

When reviewers post ratings for scam pharmacies, they might want to link to that article/image to drive home the reality. Dealing with spamvertised pharmacies means your most personal medical data is in the hands of criminals who don't care about your privacy if they can use the information to advance their own interests in some way. A picture says a thousand words.

User avatar
c۞g
Posts: 10927
Joined: Mon Jan 05, 2009 4:02 am

RE: Pill spammer database released

Post by c۞g » Fri Feb 25, 2011 3:07 am

[cite]When reviewers post ratings for scam pharmacies, they might want to link to that article/image[/cite]
I would rather see a similar article on Spamtrackers wiki - crediting Krebs - for archival purposes as well as linkage in comments; a page separate from the current ones:
http://spamtrackers.eu/wiki/index.php/Glavmed
http://spamtrackers.eu/wiki/index.php/Spamit

maybe the title of Personal information: shared and sold would be appropriate.

As for comment linking, I think that any Spamvertised brand would qualify.

User avatar
nova7
Posts: 266
Joined: Fri Apr 06, 2012 11:32 pm

RE: Pill spammer database released - glavmed, rx-partners, etc.

Post by nova7 » Fri Nov 13, 2015 7:06 pm

A judicial indictment has been brought against the owner of payment processor idpay.com, that worked with dozens of banks to push through sales for fake antivirus and pharma-spam sites. This is the same processor for HzMedia Limited, owned by Igor Gusev, the founder of GlavMed; and processor for rx-partners. (Eighth through sixth paragraph from the end. Last paragraph contains a link to the full idictment).

http://krebsonsecurity.com/2015/11/jpmo ... b-services (If the page doesn't open when clicked, remove one of the domain names—the address auto-changes to an erroneous double domain name.)

www.mywot.com/en/forum/5783-pharmacy-phish-site (rx-partners activities)

User avatar
williKi
Posts: 519
Joined: Thu Oct 01, 2015 6:52 pm

RE: Pill spammer database released - glavmed, rx-partners, etc.

Post by williKi » Fri Nov 13, 2015 9:13 pm

First link returns an error for some reason.

User avatar
nova7
Posts: 266
Joined: Fri Apr 06, 2012 11:32 pm

RE: Pill spammer database released - glavmed, rx-partners, etc.

Post by nova7 » Sat Nov 14, 2015 12:00 am

Some DNS address changing of some sorts. I've seen that once before with the same site: If the URL address shows double domain names, remove one.

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest