How safely are you baiting.

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Jun 03, 2014 1:13 am

Watch those links! Don't click on them.

MarketWatch: Is your computer secretly a bot? http://google.com/newsstand/s/CBIw3Ku5mx8

Posted: Tue Jun 03, 2014 3:20 am

bware419ers wrote:

Watch those links! Don't click on them.

Then you post a link... Shocked

Posted: Tue Jun 03, 2014 3:25 am

Bwaaaaahaaaaahaaaa.

These are not the bots you are looking for. you can go about your business.

Posted: Tue Jun 03, 2014 1:28 pm

Quote:

“Over the next few days and weeks, our investigators and prosecutors will work with private-sector partners to notify infected victims and provide links to safe and trusted tools that can help them rid themselves of Gameover Zeus and Cryptolocker and then close the vulnerabilities through which their computers were infected,”

There's going to be fake notifications and links galore generated in their name, it's a nice opportunity for lads to phish accounts and black-hats to hijack machines, 'till it's forgotten about.

Sorry for the negativity, but I think my glass must be half full today.

Posted: Tue Jun 03, 2014 1:36 pm

^^^^ "Hello, I am calling from Windows. Our records show your IP is generating viruses."

Not quite a Newb Joined: 14 Jul 2005 Posts: 41

Quote:

Then you post a link... Shocked

Pretty much my thought when I first read this, too. Laughing

Posted: Wed Jun 04, 2014 1:14 am

^^^And you all fell for it. Costa Rica, here I come.

Posted: Wed Jun 04, 2014 1:18 am

I wouldn't have touched it with a Vaccinated Crow Bar. Anyone got a Synopsis?

Not quite a Newb Joined: 14 Jul 2005 Posts: 41

Oh.

Dangit. Sad

Posted: Wed Jun 04, 2014 1:26 am

I can help get those dirty things out of your 'Puter.

Trophy Videos · Posted: Thu Jun 05, 2014 6:47 pm

bware419ers,

You know, sometimes it's just not worth it trying to be helpful around here. Laughing

Posted: Thu Jun 05, 2014 7:32 pm

^^^

you fails to understand that I am the assigned party for this link and a special agent tending to your claims.

You always make things look difficult for me nor giving me the words I need before shutting it all down why?

Don't you know its the greatest of all stress huh?

Please I would appreciate it more much better if you answer me please okay? Go and click the link immediately and reply with a email address and full password..,

Posted: Fri Jun 06, 2014 12:52 pm

From [email protected]...

Quote:

Dear Gmail User,

A DGTFX virus has been detected in your folders your email account has to be upgraded to our new Secured DGTFX anti-virus 2014 version to prevent damages to our Database log and your important files.

Click your reply tab, Fill the columns below and send back or your email account will be terminated immediately to avoid spread of the virus.

EMAIL ADDRESS:.....
PASSWORD:.....
ALTERNATIVE EMAIL ADDRESS:.....
PASSWORD:.....
QUESTION:.....
ANSWER:.......

Note that your password will be encrypted with 1024-bit RSA keys for your password safety. We are deeply sorry for the inconvenience.

Sincerely,
Gmail Web- Support

Posted: Fri Jun 06, 2014 1:54 pm

Baiting safe since '09

Posted: Fri Jun 06, 2014 3:21 pm

Just to back this up, a loan lad who I parted company with a week ago just sent me a link to a zip file, which apparently contained an update to my loan status.

After unzipping it in a safe environment and scanning it with Malwarebytes it was shown to contain a particularly nasty piece of malware.

It is also worth mentioning that I first scanned it with an up to date version of Avast!, which found no problems with it.

*** BANNED *** Joined: 26 Jul 2012 Posts: 1116

^ Lads are getting more tech savvy that is for sure. You should plug that into a virtual machine on a linux box B8er and see if you can reverse engineer it right back to the commanding end of the weaponry, maybe give his C&C the shut off with the host. Laughing

The Zeus trojan in and of itself is one of the older ones on that block:

http://en.wikipedia.org/wiki/Zeus_%28Trojan_horse%29

It was first noticed in 2007 but I want to say there was underground chatter about utilization of it in 2006. It has gone through many iterations. There are two versions of the Zeus trojan kit as by the original creator, and when he released the source code in 2010 (because he was 'retiring') it was given to his biggest competitor, the maker of Spyeye. At that point Spyeye started to incorporate a lot of the Zeus features. After that came Citadel, another iteration carrying it further.

Gameover Zeus looks like yet another iteration and there will be many to come. The scary part about all of this is the source codes for Zeus (V1 and V2), Spyeye (V1 and V2), and Citadel have been leaked. That said anyone can rather easily get a hold of them and deploy them, or modify the code to fit their purposes. What we are seeing with gameover is someone doing the latter.

That said play carefully. I know for a fact the lads are getting a hold of this software with how easy it is to obtain. Some have even figured it out enough to start using it.

Posted: Fri Jun 06, 2014 5:24 pm

I had a Lad send me a Zip file last week. I didn't open it or even download it out of G-mail. I therefore generated a Zip file of my own with my Forms (a DLL file renamed three times with a JPG extension and sent it back.) Now the Lad is complaining that he can't open any of the files I sent him. I'll be sending for the third time tonight. Razz

How safely are you baiting.	View next topic View previous topic