MyGuests - Spyware/Malware/Adware - Russian Social Network Phishing/Spam

Post Reply
Guest

MyGuests - Spyware/Malware/Adware - Russian Social Network Phishing/Spam

Post by Guest » Sat Mar 12, 2011 2:21 pm

As FaceBook there's also similar Russian social networking project - Vkontakte. Some VK's users as in FaceBook too often, almost every day receiving many suspicious messages from their "friends", usually from hacked accounts, it's spammers. I noticed the new kind of fraud - the Programm "MyGuests Vkontakte". Too much of spam messages contain links to different sites and with similar design. Sites offering to download an "incredible" software that shows list of guests visiting your personal page, when you are off-line. But it's just another way to infect your computer with spyware/viruses/adware, etc. (Distributes files such as "mguestsetup558.exe" or "My-Guests.exe", and so on)

Virus scan results here - [url=http://virusscan.jotti.org/en/scanresult/7ef116e5211e98568f73b2a6fbb12a9512687633 t=_self]mguestsetup558.exe[/url] and [url=http://virusscan.jotti.org/en/scanresult/275ed2cd7dc1c5dddb79f9fbdf705d8c5bb37018 t=_self]My-Guests.exe[/url]

All these domains have similar design, as in this screenshot:
[url=https://www.mywot.com'http://img848.imageshack.us/i/myguests.jpg/' t='_blank']Image[/url]

Here are some of these spamvertised/fraudulent domains, please rate them red.

guests.vkfree.ru
newmyguests.ru
my-guests.ru
gostimoi.ru
gostivk.ru
guestsvk.ru
vk-guests.falost.ru
my-vk-guests.ru
seet10.jino.ru
my-guests.free02.ru
vkont.bos.ru

killerblox
Posts: 41
Joined: Thu Mar 10, 2011 10:23 pm

RE: MyGuests - Spyware/Malware/Adware - Russian Social Network P

Post by killerblox » Sat Mar 12, 2011 2:24 pm

this is why facebook should have an option to be in russian so this does not happen.

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

RE: MyGuests - Spyware/Malware/Adware - Russian Social Network P

Post by c۞g » Sat Mar 12, 2011 3:28 pm

Thanks!

I had to vk.com a visit, it's been awhile.
Both vk.com and vkontakte.ru are closed registrations requiring an invitation to join.
Your scan result links suggest a Trojan used to steal passwords for Vkontakte accounts.

Looking at the [url=http://www.robtex.com/dns/my-guests.ru.html#records t=_self]DNS[/url] I see my-guests.ru sits on smsoboroten.ru nameservers.

It would be nice if you could examine these domains as well, some are unrated, some have poor reputations.
I stay away from non-English sites - using a translator consumes too much time.

Figure10
Posts: 270
Joined: Sun Jun 20, 2010 9:46 pm

RE: MyGuests - Spyware/Malware/Adware - Russian Social Network P

Post by Figure10 » Sat Mar 12, 2011 4:41 pm

Facebook has its share of phishers and scammers. Every social network does.

Guest

New MyGuests

Post by Guest » Sun Mar 13, 2011 1:28 pm

myvkguests.ru
guests.free02.ru
vk-gosti.ipua.ru

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests