Pill spammer database released

Ответить
Аватара пользователя
alphacentauri
Сообщения: 1670
Зарегистрирован: Пн ноя 02, 2009 12:52 pm

Pill spammer database released

Сообщение alphacentauri » Пт фев 25, 2011 12:10 am

Brian Krebs' security blog has a good article today:
http://krebsonsecurity.com/2011/02/spam ... s-exposed/
As a result of infighting among Russian spammers, the customer and affiliate records of the prolific spammers behind "Canadian Pharmacy" have been distributed to antispam activists who then provided it to law enforcement agencies and to Krebs, a free lance reporter with a popular blog.

One of the images shows Krebs has blurred lines in the screen shot that contained the names, phone numbers, and email addresses of the customers who ordered drugs from the site.

http://krebsonsecurity.com/wp-content/u ... dioces.png

Presumably if the spammer sent the file halfway around the world to an antispammer he knew only by reputation, he's shared it with quite a few of his friends and criminal associates, too.

People who order from these pharmacies often have the mistaken idea that they have more privacy than if they went to a real doctor and a real pharmacy in their own community. You see them posting on forums, howling in protest about getting persistent calls from phone marketers trying to sell them more drugs after they have placed an initial order -- somehow, they are surprised by this.

When reviewers post ratings for scam pharmacies, they might want to link to that article/image to drive home the reality. Dealing with spamvertised pharmacies means your most personal medical data is in the hands of criminals who don't care about your privacy if they can use the information to advance their own interests in some way. A picture says a thousand words.

Аватара пользователя
c۞g
Сообщения: 10927
Зарегистрирован: Пн янв 05, 2009 4:02 am

RE: Pill spammer database released

Сообщение c۞g » Пт фев 25, 2011 3:07 am

[cite]When reviewers post ratings for scam pharmacies, they might want to link to that article/image[/cite]
I would rather see a similar article on Spamtrackers wiki - crediting Krebs - for archival purposes as well as linkage in comments; a page separate from the current ones:
http://spamtrackers.eu/wiki/index.php/Glavmed
http://spamtrackers.eu/wiki/index.php/Spamit

maybe the title of Personal information: shared and sold would be appropriate.

As for comment linking, I think that any Spamvertised brand would qualify.

Аватара пользователя
nova7
Сообщения: 266
Зарегистрирован: Пт апр 06, 2012 11:32 pm

RE: Pill spammer database released - glavmed, rx-partners, etc.

Сообщение nova7 » Пт ноя 13, 2015 7:06 pm

A judicial indictment has been brought against the owner of payment processor idpay.com, that worked with dozens of banks to push through sales for fake antivirus and pharma-spam sites. This is the same processor for HzMedia Limited, owned by Igor Gusev, the founder of GlavMed; and processor for rx-partners. (Eighth through sixth paragraph from the end. Last paragraph contains a link to the full idictment).

http://krebsonsecurity.com/2015/11/jpmo ... b-services (If the page doesn't open when clicked, remove one of the domain names—the address auto-changes to an erroneous double domain name.)

www.mywot.com/en/forum/5783-pharmacy-phish-site (rx-partners activities)

Аватара пользователя
williKi
Сообщения: 519
Зарегистрирован: Чт окт 01, 2015 6:52 pm

RE: Pill spammer database released - glavmed, rx-partners, etc.

Сообщение williKi » Пт ноя 13, 2015 9:13 pm

First link returns an error for some reason.

Аватара пользователя
nova7
Сообщения: 266
Зарегистрирован: Пт апр 06, 2012 11:32 pm

RE: Pill spammer database released - glavmed, rx-partners, etc.

Сообщение nova7 » Сб ноя 14, 2015 12:00 am

Some DNS address changing of some sorts. I've seen that once before with the same site: If the URL address shows double domain names, remove one.

Ответить

Кто сейчас на конференции

Сейчас этот форум просматривают: нет зарегистрированных пользователей и 1 гость