<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>AndrewSaysHello.com &#187; spam</title>
	<atom:link href="http://www.andrewsayshello.com/tag/spam/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.andrewsayshello.com</link>
	<description>Andrew&#039;s Website for Lots-o-Fun and Junk!</description>
	<lastBuildDate>Thu, 29 Jul 2010 13:07:29 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>As Apple Grows it is Becoming the New Hacker Bulls-Eye!</title>
		<link>http://www.andrewsayshello.com/technology/as-apple-grows-it-is-becoming-the-new-hacker-bulls-eye/</link>
		<comments>http://www.andrewsayshello.com/technology/as-apple-grows-it-is-becoming-the-new-hacker-bulls-eye/#comments</comments>
		<pubDate>Fri, 18 Jun 2010 12:19:01 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[at&t]]></category>
		<category><![CDATA[goatse security]]></category>
		<category><![CDATA[hacker]]></category>
		<category><![CDATA[ipad]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[osx]]></category>
		<category><![CDATA[safari]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=1301</guid>
		<description><![CDATA[﻿When Apple was just a niche maker of Mac computers and only truly popular among college students and graphic designers, hackers paid little attention to the company. Instead, they focused on Microsoft, which had more than a 90% share of the PC operating system market. Those days are over. Recent iPad security scares are a sign [...]]]></description>
			<content:encoded><![CDATA[<p>﻿<a href="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/06/apple-logo1.jpg" rel="lightbox[1301]"><img class="alignright size-medium wp-image-1304" title="apple-logo1" src="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/06/apple-logo1-248x300.jpg" alt="" width="248" height="300" /></a>When Apple was just a niche maker of Mac computers and only truly popular among college students and graphic designers, hackers paid little attention to the company. Instead, they focused on Microsoft, which had more than a 90% share of the PC operating system market.</p>
<p>Those days are over. Recent <a href="http://www.andrewsayshello.com/technology/fbi-investigating-breach-of-ipad-customer-email-addresses-on-att-website/" target="_blank">iPad security scares</a> are a sign that Apple&#8217;s devices are a growing target for hackers, spammers and malicious coders.</p>
<blockquote><p>&#8220;Market share is a pretty good indicator of who hackers are going after,&#8221; said Kevin Haley, director at Symantec Security Response. &#8220;Hackers are motivated by money, so they want to get access to the most amount of people.&#8221;</p></blockquote>
<p>Hacker group Goatse Security was able to obtain 114,000 iPad 3G users&#8217; e-mail addresses and iPad SIM card ID numbers from AT&amp;T&#8217;s website last week. The vulnerability was on AT&amp;T&#8217;s site, but any hit against the iPad dings Apple as well. And in a blog post, Goatse Security said Monday that a &#8220;skilled attacker&#8221; could take advantage of a weakness in the iPad&#8217;s Safari Internet browser to launch a spam attack from a compromised iPad.</p>
<p>&#8220;This is a wake-up call for Apple, and it cannot afford to hit the snooze button,&#8221; said Hemanshu Nigam, founder of SSP Blue, a cybersecurity consulting firm. &#8220;The hacker community focuses on companies that are on the top of their games. Apple has gained enough market share that it has caught hackers&#8217; attention.&#8221;</p>
<p>It&#8217;s not surprising that Apple is becoming a growing target &#8212; it&#8217;s simply a matter of scale. Cybercriminals try to hack the software that most people use to access the Internet, and increasingly, that software is made by Apple. While Apple&#8217;s PC market share is still in the single digits, Apple is now the second largest smart phone maker in the United States, behind only BlackBerry maker Research in Motion. It has also sold more than 2 million iPads in just two months.</p>
<blockquote><p>&#8220;Any company&#8217;s device or platform on which lots and lots of people are exchanging or storing data is going to be susceptible to an attack,&#8221; said Fred Rica, principal security analyst at PricewaterhouseCoopers. &#8220;Hackers are beginning to change over to other platforms that hadn&#8217;t been traditional targets, particularly to mobile.&#8221;</p></blockquote>
<p>As Apple products become higher-profile targets, its response is going to be tested. The company&#8217;s stance on security has long been &#8220;don&#8217;t worry about it.&#8221; For instance, on its website Apple says simply, &#8220;Mac OS X doesn&#8217;t get PC viruses.&#8221; The iPhone and iPad websites don&#8217;t even mention security.</p>
<p>Apple claims that the Unix framework that its Mac operating system is built on is inherently safer than Windows. The truth is that Mac OS has as many vulnerabilities as Windows, according to Nigam &#8212; Apple patches its products just often as Microsoft does.</p>
<p>In the past, Apple has responded quietly when vulnerabilities are exposed, patching products through automatic updates with no announcement. The company&#8217;s famous &#8220;Get a Mac&#8221; ads say Microsoft&#8217;s constant security updates and alerts interfere with users&#8217; ability to do work on their computers. Ironically, Apple&#8217;s Safari browser&#8217;s lack of security alerts is one of the factors contributing to the security hole in the iPad, according to Goatse Security.</p>
<p>&#8220;Suggesting Apple doesn&#8217;t get viruses gives its users a completely false sense of security,&#8221; Nigam said. &#8220;It&#8217;s essentially taunting hackers. They&#8217;ll take it as a challenge, and just start exploiting Apple&#8217;s user base.&#8221; As a result, Nigam suggested it&#8217;s time for Apple to change it&#8217;s attitude. Right now, Apple prioritizes the user experience ahead of security. That can backfire. &#8221;Apple has the capability to take charge of this situation now,&#8221; he said. &#8220;If it doesn&#8217;t, it&#8217;s risking damage to its reputation for the long haul, a la Microsoft.&#8221;</p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://vll.me/1l3">http://vll.me/1l3</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/as-apple-grows-it-is-becoming-the-new-hacker-bulls-eye/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&#8220;Likejacking&#8221; Takes Off on Facebook!</title>
		<link>http://www.andrewsayshello.com/technology/likejacking-takes-off-on-facebook/</link>
		<comments>http://www.andrewsayshello.com/technology/likejacking-takes-off-on-facebook/#comments</comments>
		<pubDate>Wed, 02 Jun 2010 13:56:21 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Facebook]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[clickjacking]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[like button]]></category>
		<category><![CDATA[likebait]]></category>
		<category><![CDATA[likejacking]]></category>
		<category><![CDATA[linkbait]]></category>
		<category><![CDATA[linkjacking]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=1264</guid>
		<description><![CDATA[Security researchers are warning of the newest Facebook threat, something they&#8217;re calling &#8220;likejacking,&#8221; a Facebook-enabled clickjacking attack that tricks users into clicking links that mark the clicked site as one of your Facebook &#8220;likes.&#8221; These likes then show up on your profile and, of course, in your Facebook News Feed where your friends can see [...]]]></description>
			<content:encoded><![CDATA[<p>Security researchers are warning of the newest Facebook threat, something they&#8217;re calling &#8220;likejacking,&#8221; a Facebook-enabled clickjacking attack that tricks users into clicking links that mark the clicked site as one of your Facebook &#8220;likes.&#8221; These likes then show up on your profile and, of course, in your Facebook News Feed where your friends can see the link and click it, allowing the vicious, viral cycle to continue.</p>
<p>According to <a href="http://www.sophos.com/blogs/gc/g/2010/05/31/viral-clickjacking-like-worm-hits-facebook-users/">security firm Sophos</a>, hundreds of thousands of users have already fallen for this new &#8220;likejacking&#8221; trick thanks to the clever and tantalizing linkbait the spammers use to entice people to click their links. For example:</p>
<blockquote><p>&#8220;LOL This girl gets OWNED after a POLICE OFFICER reads her STATUS MESSAGE.&#8221;</p>
<p>&#8220;This man takes a picture of himself EVERYDAY for 8 YEARS!!&#8221;</p>
<p>&#8220;The Prom Dress That Got This Girl Suspended From School.&#8221;</p></blockquote>
<p>After clicking through on a link, victims don&#8217;t get to see the promised content, but rather a blank page reading &#8220;click here to continue.&#8221; This page contains the clickjacking worm (<a href="http://www.sophos.com/security/analyses/viruses-and-spyware/trojiframeet.html">Troj/Iframe-ET</a>) embedded via an invisible link. Click anywhere on the page and the message is posted to your profile and News Feed, allowing the worm to further its spread.</p>
<p>This particular exploit is made possible by way of Facebook&#8217;s new &#8220;like button&#8221; and its associated developer code. According to the <a href="http://developers.facebook.com/docs/reference/plugins/like">Like Button documentation</a>, the buttons can be customized with meta data that includes things like the title of the webpage, the name of the Web site and the URL of a picture for the page. By customizing these fields, spammers and hackers can easily create links that are, in fact, malicious &#8220;likes.&#8221;</p>
<p>The popularity of this particular attack vector is not surprising. Soon after the launch of the Facebook like button, it has been reported on its potential as a threat, noting how incredibly easy it is to create like buttons that link to anything on the web &#8211; even pages you have never visited.</p>
<p>It was only a matter of time before spammers and hackers started exploiting this weakness for their own purposes. (Frankly, many are surprised it took this long.)</p>
<p>The problem has to do with the overly simple way Facebook has implemented the &#8220;like button&#8221; feature. Non-developers can plug a URL into a wizard that generates code which can be copied and pasted anywhere on the Web. Like buttons created this way or manually, via handwritten code, will function properly even if they point to a webpage that&#8217;s on a different domain from the page where the button is being hosted.</p>
<p><a href="http://kylewritescode.com/">Kyle Bragger</a>, a Web entrepreneur who just launched <a href="http://forrst.com/">Forrst</a>, an online community for developers and designers, warned Facebook users of &#8220;like fraud&#8221; back in April by way of personal blog post. To circumvent potential likejacking attempts such as these, he created <a href="http://www.readwriteweb.com/archives/how_to_like_anything_on_the_web_safely.php">a Facebook &#8220;like&#8221; bookmarklet</a> which safely &#8220;likes&#8221; the page you&#8217;re on, allowing you to feel secure that you&#8217;re actually liking the real thing and not some shady linkbait. (Or likebait, if you will).</p>
<p>If you&#8217;ve been hit with this likejacking attack, the best you can do is remove the like from your profile and delete the post from your News Feed. You might want to apologize to your friends with a Facebook status update, too.</p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://tllg.net/xc">http://tllg.net/xc</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/likejacking-takes-off-on-facebook/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>FTC Shuts Doors On Notorious Rogue Internet Service Provider!</title>
		<link>http://www.andrewsayshello.com/technology/ftc-shuts-doors-on-notorious-rogue-internet-service-provider/</link>
		<comments>http://www.andrewsayshello.com/technology/ftc-shuts-doors-on-notorious-rogue-internet-service-provider/#comments</comments>
		<pubDate>Thu, 27 May 2010 13:30:45 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[3fn]]></category>
		<category><![CDATA[3fn.net]]></category>
		<category><![CDATA[aps communication]]></category>
		<category><![CDATA[aps communications]]></category>
		<category><![CDATA[aps telecom]]></category>
		<category><![CDATA[apx telecom]]></category>
		<category><![CDATA[bot herder]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[c&c server]]></category>
		<category><![CDATA[ftc]]></category>
		<category><![CDATA[isp]]></category>
		<category><![CDATA[malicious software]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[porn]]></category>
		<category><![CDATA[rogue Internet service provider]]></category>
		<category><![CDATA[server]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[triple fiber network]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=1205</guid>
		<description><![CDATA[At the Federal Trade Commission&#8217;s request, a district court judge has permanently shut down 3FN, a rogue Internet service provider that recruited, hosted, and actively participated in the distribution of spam, spyware, child pornography, and other illegal content. The ISP&#8217;s computer servers and other assets have been seized and will be sold by a court-appointed [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_1207" class="wp-caption alignright" style="width: 310px"><a href="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/05/server-room.png" rel="lightbox[1205]"><img class="size-medium wp-image-1207" title="Server Room" src="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/05/server-room-300x225.png" alt="Example of a Server Room" width="300" height="225" /></a><p class="wp-caption-text">Example of a Server Room.</p></div>
<p>At the Federal Trade Commission&#8217;s request, a district court judge has permanently shut down 3FN, a rogue Internet service provider that recruited, hosted, and actively participated in the distribution of spam, spyware, child pornography, and other illegal content.</p>
<p>The ISP&#8217;s computer servers and other assets have been seized and will be sold by a court-appointed receiver. The operation has been ordered to turn over $1.08 million in ill-gotten gains to the FTC.</p>
<p>In June 2009, the FTC charged that 3FN, which does business under a variety of names, actively recruited and colluded with criminals to distribute harmful electronic content, including spyware, viruses, Trojan horses, phishing schemes, botnet command-and-control (C&amp;C) servers, and pornography. The FTC alleged that the defendant advertised its services in the darkest corners of the Internet, including a chat room for spammers.</p>
<p>The FTC complaint alleged that 3FN actively shielded its criminal clientele by either ignoring takedown requests issued by the online security community, or by shifting its criminal elements to other Internet protocol addresses it controlled to evade detection.</p>
<p>The FTC also alleged that 3FN deployed and operated botnets. According to the FTC, the defendant recruited bot herders and hosted the C&amp;C servers.</p>
<p>Transcripts of instant-message logs filed with the district court show the defendants&#8217; senior employees discussing the configuration of botnets with bot herders. And, in filings with the district court, the FTC alleged that more than 4,500 malicious software programs were controlled by C&amp;C servers hosted by 3FN.</p>
<p>This malware included programs capable of keystroke logging, password stealing, and data theft; programs with hidden backdoor remote control activity; and programs involved in spam distribution, the FTC said.</p>
<p>On June 15, 2009, the court issued a preliminary injunction to prohibit 3FN&#8217;s illegal activities and require its upstream Internet providers and data centers to stop providing services to 3FN.</p>
<p>The court has now ordered a permanent bar on the illegal activities of 3FN and its agents. It has appointed a receiver and instructed him to liquidate the operation&#8217;s assets.</p>
<p>The defendants named in the FTC&#8217;s complaint are Pricewert LLC, also doing business as 3FN.net, Triple Fiber Network, APS Telecom, APX Telecom, APS Communications, and APS Communication.</p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://tllg.net/8c">http://tllg.net/8c</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/ftc-shuts-doors-on-notorious-rogue-internet-service-provider/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Scams So Rampant on Facebook, Very Top Exec Falls For One!</title>
		<link>http://www.andrewsayshello.com/technology/scams-so-rampant-on-facebook-very-top-exec-falls-for-one/</link>
		<comments>http://www.andrewsayshello.com/technology/scams-so-rampant-on-facebook-very-top-exec-falls-for-one/#comments</comments>
		<pubDate>Tue, 11 May 2010 19:26:14 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Facebook]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[account]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[jim breyer]]></category>
		<category><![CDATA[myspace]]></category>
		<category><![CDATA[scam]]></category>
		<category><![CDATA[social network]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=1143</guid>
		<description><![CDATA[Lies, fake news about Facebook and outright scams have grown more common on the giant social network than weeds in a Farmville player&#8217;s fields. Now the problem has reached the very top of the organization, with one of only four members of Facebook&#8217;s hyper-exclusive Board of Directors apparently handing his account credentials over to a [...]]]></description>
			<content:encoded><![CDATA[<p>Lies, fake news about Facebook and outright scams have grown more common on the giant social network than weeds in a Farmville player&#8217;s fields. Now the problem has reached the very top of the organization, with one of only four members of Facebook&#8217;s hyper-exclusive Board of Directors apparently handing his account credentials over to a service that started spamming his friends with a fake offer of a &#8220;Facebook phone number.&#8221; If a guy like that falls for it, who can blame little old you or me if we fall for such a scam, too?</p>
<p>Apparently the Board Member, investor Jim Breyer, has had his Facebook account suspended over the spam. &#8220;Users whose accounts have been compromised are put through a remediation process, where they must take steps to re-secure their account and learn security best practices,&#8221; a Facebook official told leading financial industry blog <a href="http://www.pehub.com/71201/facebook-loses-face-board-member%E2%80%99s-account-is-breached/">PEHub</a> yesterday, &#8220;This is what happened with Mr. Breyer&#8217;s account.&#8221; If Facebook becomes all the more awash in scams and spams, this may be a key symbol of when the tide turned and it became too much.</p>
<p>In as much as Facebook has brought push-button publishing and social graph technology to hundreds of millions of people around the world for the first time &#8211; this is a big challenge the company is going to have to deal with in order for its service to have maximum, long-lasting impact on our culture.</p>
<p>Can Facebook kill the spam? Facebook does have a unique advantage over email, the company points out. When a message from a source is discovered to be spammy, the company can zap it system-wide all at once. Apparently that&#8217;s only proven so effective so far, though.</p>
<p>If every social network rises and falls, though, effectively tackling this problem may be important to protecting the Facebook user experience from &#8220;pulling a MySpace.&#8221; When the problem reaches the very top of the company, it may be time to be concerned.</p>
<p>MySpace took big steps to kill spam years ago, but not until it was too late and the company&#8217;s reputation was set. Can Facebook save itself from a similar fate? We&#8217;ll see.</p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://tllg.net/fw">http://tllg.net/fw</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/scams-so-rampant-on-facebook-very-top-exec-falls-for-one/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Symantec Warns of Cyber Attacks Worse Than Love Bug!</title>
		<link>http://www.andrewsayshello.com/technology/symantec-warns-of-cyber-attacks-worse-than-love-bug/</link>
		<comments>http://www.andrewsayshello.com/technology/symantec-warns-of-cyber-attacks-worse-than-love-bug/#comments</comments>
		<pubDate>Mon, 10 May 2010 02:12:59 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[bot]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[data]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[love bug]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[messagelabs]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[symantec]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=1141</guid>
		<description><![CDATA[A decade after the Love Bug virus attacked millions of computers worldwide and put the Philippines in the IT world map in a negative way, computer security experts have noticed that today&#8217;s computer attacks are more malicious than the original computer security threat. In its April 2010 security report, Symantec said it has detected 36,208 unique strains [...]]]></description>
			<content:encoded><![CDATA[<p>A decade after the Love Bug virus attacked millions of computers worldwide and put the Philippines in the IT world map in a negative way, computer security experts have noticed that today&#8217;s computer attacks are more malicious than the original computer security threat.</p>
<p>In its April 2010 security report, Symantec said it has detected 36,208 unique strains of malware that were designed to carry out targeted attacks.</p>
<p>MessageLabs, which was acquired by Symantec later, was the first one to raise the alert on the Love Bug virus, which was designed to overwrite and destroy data. The virus came in the form of a message attachment when, once opened, sent itself to the addresses of the email recipient and spread on from there.</p>
<p>Ten years since Symantec Hosted Services, then MessageLabs, intercepted 13,000 copies of the virus in a single day on 4 May 2000, MessageLabs Intelligence said it now stops 1.5 million copies of malicious e-mails each day.</p>
<p>&#8220;Although mass mailing viruses like the Love Bug are rare today, cyber criminals&#8217; techniques have evolved to more malicious, highly targeted attacks and they are motivated less by achievement and credibility than by financial gain and identity theft,&#8221; Symantec said in a statement. &#8220;On 4 May, 2000, 1 in 28 e-mails contained the Love Bug virus. By comparison, 1 in 287.2 e-mails contained a virus on 9 April 2010, the peak for April. In April 2010 overall, MessageLabs Intelligence intercepted 36,208 unique strains of malware.&#8221;</p>
<p>&#8220;The Love Bug was operating in the wake of the Melissa virus, a similarly destructive worm from the previous year,&#8221; said MessageLabs Intelligence senior analyst Paul Wood. &#8220;Back then, users were less savvy, regarding the dangers posed by suspicious e-mail attachments and e-mails from unknown senders. The general public was also less aware of issues such as spam and denial of service attacks.&#8221;</p>
<h2><strong>Bot Attacks<span style="font-weight: normal; font-size: 13px;"> </span></strong></h2>
<p>The April 2010 MessageLabs Intelligence Report also revealed that Rustock has surpassed Cutwail as the biggest botnet both in terms of the amount of spam it sends and the amount of active bots under its control.</p>
<p>The report noted that Rustock has reduced the output of individual bots by 65 per cent but increased the number of active bots by 300 per cent, thus, making up for the decreased output. Meanwhile, Cutwail has reduced in size to 600,000 bots from two million bots in May 2009 and is now responsible for only four per cent of all spam. &#8220;Rustock remains the largest spam-sending botnet responsible for 32.8 per cent of all spam,&#8221; the report read.</p>
<p>&#8220;Affected by the closure of ISP Real Host in August 2009, Cutwail likely lost the ability to update some of its bots causing its numbers to diminish greatly without the ability to recover,&#8221; said Wood. &#8220;As a result, Rustock has taken over significant volumes from spammers by undercutting the market with greater capacity and lower operational costs.&#8221;</p>
<h2><strong>Spam<span style="font-weight: normal; font-size: 13px;"> </span></strong></h2>
<p>Worldwide, the spam rate this month was pegged at 89.9 per cent, a drop of 0.8 per cent from the previous month. In the region, Malaysia and Singapore also saw a drop in the spam rate to 87.7 per cent, and 87.6 per cent respectively, the report added.</p>
<p>&#8220;Spam is more commonly sent from computers running Windows than from those running other operating systems,&#8221; Wood said. &#8220;However, spam not identified as coming from botnets was seen in lower proportions coming from Windows machines than from known botnets.&#8221;</p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://tllg.net/hj">http://tllg.net/hj</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/symantec-warns-of-cyber-attacks-worse-than-love-bug/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>1.5 Million Stolen Facebook IDs up for Sale!</title>
		<link>http://www.andrewsayshello.com/technology/1-5-million-stolen-facebook-ids-up-for-sale/</link>
		<comments>http://www.andrewsayshello.com/technology/1-5-million-stolen-facebook-ids-up-for-sale/#comments</comments>
		<pubDate>Mon, 26 Apr 2010 13:34:03 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Facebook]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[accounts]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[kirllos]]></category>
		<category><![CDATA[scam]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[stolen]]></category>
		<category><![CDATA[username]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=1115</guid>
		<description><![CDATA[A hacker named Kirllos has a rare deal for anyone who wants to spam, steal or scam on Facebook: an unprecedented number of user accounts offered at rock-bottom prices. Researchers at VeriSign&#8217;s iDefense group recently spotted Kirllos selling Facebook user names and passwords in an underground hacker forum, but what really caught their attention was the [...]]]></description>
			<content:encoded><![CDATA[<p id="first_paragraph">A hacker named Kirllos has a rare deal for anyone who wants to spam, steal or scam on Facebook: an unprecedented number of user accounts offered at rock-bottom prices.</p>
<p>Researchers at VeriSign&#8217;s iDefense group recently spotted Kirllos selling Facebook user names and passwords in an underground hacker forum, but what really caught their attention was the volume of credentials he had for sale: 1.5 million accounts.</p>
<p><a href="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/04/fbaccounts.png" rel="lightbox[1115]"><img class="aligncenter size-medium wp-image-1116" title="fbaccounts" src="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/04/fbaccounts-300x133.png" alt="" width="300" height="133" /></a></p>
<p>IDefense doesn&#8217;t know if Kirllos&#8217; accounts are legitimate, and Facebook didn&#8217;t respond to messages Thursday seeking comment. If they are legitimate, he has the account information of about one in every 300 Facebook users. His asking price varies from $25 to $45 per 1,000 accounts, depending on the number of contacts each user has.</p>
<p>To date, Kirllos seems to have sold close to 700,000 accounts, according to VeriSign Director of Cyber Intelligence Rick Howard. Hackers have been selling stolen social-networking credentials for a while &#8212; VeriSign has seen a brisk trade in names and passwords for Russia&#8217;s VKontakte, for example. But now the trend is to go after global targets such as Facebook, Howard said.</p>
<p>Facebook has more than 400 million users worldwide, many of whom fall victim to scams each day. In one such scam, criminals send out messages from a compromised account, telling friends that the account&#8217;s owner is trapped in a foreign country and needs money to get home.</p>
<p>In another, they send Web links that lead to malicious software, telling friends that it&#8217;s a hilarious or sensationalistic video.</p>
<p>&#8220;People will follow it because they believe it was a friend that told them to go to this link,&#8221; said Randy Abrams, director of technical education with security vendor Eset. Once the malware gets installed, criminals can steal more passwords, break into bank accounts, or simply use the computers to send spam or launch distributed denial of service attacks. &#8220;There&#8217;s just a plethora of things that people can do if they can trick people into installing their software,&#8221; he said.</p>
<p>Kirllos&#8217; Facebook prices are extremely cheap compared to what others are charging. In its most recent <a href="http://www.symantec.com/business/theme.jsp?themeid=threatreport" target="new">Internet Security Threat Report</a>, Symantec found that e-mail usernames and passwords typically went for between $1 to $20 per account &#8212; Kirllos wants as little as $0.025 per Facebook account. More coveted credit card or bank account details can go for much more, ranging between $0.85 to $30 for credit card numbers to $15 to $850 for top-quality online bank accounts.</p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://tllg.net/ad">http://tllg.net/ad</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/1-5-million-stolen-facebook-ids-up-for-sale/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Microsoft Shuts Down Global Spam Network!</title>
		<link>http://www.andrewsayshello.com/technology/microsoft-shuts-down-global-spam-network/</link>
		<comments>http://www.andrewsayshello.com/technology/microsoft-shuts-down-global-spam-network/#comments</comments>
		<pubDate>Fri, 26 Feb 2010 14:42:33 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[bot]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[commad and control]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[operation b49]]></category>
		<category><![CDATA[rootkit]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[waledac]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=986</guid>
		<description><![CDATA[Microsoft has won court approval to shut down a global network of computers which it says is responsible for more than 1.5bn spam messages every day. A US judge granted the firm&#8217;s request to shut down 277 internet domains, which it said were used to &#8220;command and control&#8221; the so-called Waledac botnet. A botnet is a [...]]]></description>
			<content:encoded><![CDATA[<p>Microsoft has won court approval to shut down a global network of computers which it says is responsible for more than 1.5bn spam messages every day. A US judge granted the firm&#8217;s request to shut down 277 internet domains, which it said were used to &#8220;command and control&#8221; the so-called Waledac botnet.</p>
<p>A botnet is a network of infected computers under the control of hackers.</p>
<p>The firm said that closing the domains would mean that up to 90,000 PCs would stop receiving orders to send out spam.</p>
<p>A recent analysis by the firm found that between 3-21 December &#8220;approximately 651 million spam e-mails attributable to Waledac were directed to Hotmail accounts alone&#8221;. It said it was one of the 10 largest botnets in the US.</p>
<p>Machines in a botnet have usually been infected by a computer virus or worm. Typically, users do not know their machine has been hijacked.</p>
<p>Microsoft said that although it had effectively shut down the network, thousands of computers would still be infected with malware and advised people to run anti-virus software. The court order was part of what was called &#8220;Operation b49&#8243;.</p>
<p>Along with intelligence organisation Shadowserver, the University of Washington and security firm Symantec, Microsoft managed to get a court in Alexandria, Virginia, to force Verisign, which manages the .com domain, to temporarily switch off the domains.</p>
<p>Microsoft said it was the result of months of investigation and described it as a legal first.</p>
<blockquote><p>&#8220;This action has quickly and effectively cut off traffic to Waledac at the .com or domain registry level, severing the connection between the command and control centres of the botnet and most of its thousands of zombie computers around the world.&#8221;</p></blockquote>
<p><a href="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/02/Botnet-graphic.gif" rel="lightbox[986]"><img class="aligncenter size-full wp-image-987" title="Botnet graphic" src="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2010/02/Botnet-graphic.gif" alt="" width="466" height="400" /></a></p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://tllg.net/oy">http://tllg.net/oy</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/microsoft-shuts-down-global-spam-network/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>China Home to Most Hacked Computers!</title>
		<link>http://www.andrewsayshello.com/technology/china-home-to-most-hacked-computers/</link>
		<comments>http://www.andrewsayshello.com/technology/china-home-to-most-hacked-computers/#comments</comments>
		<pubDate>Tue, 16 Feb 2010 15:36:34 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Technology]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[china]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[mcafee]]></category>
		<category><![CDATA[rootkit]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=955</guid>
		<description><![CDATA[More computers are hacked in China than anywhere else in the world, a new report from security firm McAfee revealed. In the last three months of 2009, about 1,095,000 computers in China were hacked, and 1,057,000 in the United States – this on top of the 10 million or so machines already infected in each country. An estimated $1 trillion in intellectual [...]]]></description>
			<content:encoded><![CDATA[<p>More computers are hacked in China than anywhere else in the world, a new <a href="http://www.mcafee.com/us/local_content/reports/threats_2009Q4_final.pdf" target="_blank">report</a> from security firm McAfee revealed.</p>
<p>In the last three months of 2009, about 1,095,000 computers in China were hacked, and 1,057,000 in the United States – this on top of the 10 million or so machines already infected in each country. An estimated $1 trillion in intellectual property was stolen worldwide in 2008 through hacking, McAfee estimated.</p>
<p>In China, hacked computers often are clustered into &#8220;botnets,&#8221; a.k.a. battalions of corrupted computers commandeered to attack websites and spew spam. The growing presence of botnets is yet another sign of network insecurity – already a huge concern for both business and government. The news comes just after China closed down Black Hawk Safety Net, the country&#8217;s biggest training website for hackers. The site signed up some 12,000 paying subscribers, providing them with both primers for cyberattack and Trojan software, which hackers use to illegally control computers. The report also comes after Secretary of State Hillary Rodham Clinton&#8217;s historic Jan. 21 speech on Internet freedom, where she announced: &#8220;An attack on one nation&#8217;s networks can be an attack on all.&#8221;</p>
<p>China produced 12 percent of the world&#8217;s botnet &#8220;zombies,&#8221; as they&#8217;re called. The U.S. was second on the list with 9.5 percent – down from the top spot (and 13.1 percent) in the previous quarter. The rest of the top five:Brazil, Russia, and Germany.</p>
<p>It&#8217;s not necessarily the Chinese themselves who are causing the problems. &#8220;Just because the attacks original from China doesn&#8217;t mean the people behind the attacks are Chinese or even physically in China,&#8221; Gideon Lenkey, founder of protection company Ra Security, told Internetevolution.com. &#8221;China&#8217;s Internet is very closed off from the rest of the Internet so it&#8217;s a great position to attack from.&#8221;</p>
<p>Other findings from the report:</p>
<p>• A drop in spam: Levels dropped from a record 175 billion a day in the third quarter of 2009 to 135 billion, a 24 percent decline. Don&#8217;t get too excited – the &#8220;overall historical trend still points upward,&#8221; said the report. &#8220;Compared with the fourth quarter of 2008, volume is up 35 percent.&#8221;  For the record, there were about 135.5 billion spam emails sent every day in 2009, compared with 122 billion a day in 2008 and 76.5 billion a day in 2007. The U.S. is the world leader in spam production, but Brazil and India are fast catching up.</p>
<p>• Malware threats are on the rise, nearly doubling over the year. It was a &#8220;transformative and evolutionary year for computer threats,&#8221; the report said, with portable storage devices becoming a very popular target. This is partly because the hardware is so popular, but also because so many PCs use the Windows autorun feature – meaning no user action is required to become infected.</p>
<p>• Last year saw an increase in bogus  antivirus software that convinces web users their PC is infected and asks them to pay for equally bogus security software. Thanks to the growing popularity of Adobe applications, there also was a rise in attempts to exploit vulnerabilities in Flash and Acrobat reader.</p>
<p>Last month a report from McAfee and the Ce nter for Strategic and International Studies revealed a growing threat of cyberattack, with widespread attacks on critical systems.</p>
<div style="margin-top:2em;">
------------------------------------------------------------------------<br />
      The Short URL of this blog posting is    <a href="http://tllg.net/7t">http://tllg.net/7t</a>
  </div>

<div style="margin-top:1em;">
  </div>]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/china-home-to-most-hacked-computers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New Spamming Botnet On The Rise!</title>
		<link>http://www.andrewsayshello.com/technology/new-spamming-botnet-on-the-rise/</link>
		<comments>http://www.andrewsayshello.com/technology/new-spamming-botnet-on-the-rise/#comments</comments>
		<pubDate>Sat, 07 Nov 2009 13:28:02 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=866</guid>
		<description><![CDATA[Upping its output of spam by nearly 5 percent in recent weeks, a new botnet called Festi has grabbed the attention of researchers, cracking the list of top 10 most prolific spamming botnets, according to Symantec&#8217;s MessageLabs Intelligence team. Festi, which the researchers first started watching closely in August, is currently sending an average of [...]]]></description>
			<content:encoded><![CDATA[<p>Upping its output of spam by nearly 5 percent in recent weeks, a new botnet called Festi has grabbed the attention of researchers, cracking the list of top 10 most prolific spamming botnets, according to Symantec&#8217;s MessageLabs Intelligence team.</p>
<p>Festi, which the researchers first started watching closely in August, is currently sending an average of 2.5 billion spam messages a day around the world &#8212; mostly pharmaceutical spam, including male-enhancement and herbal remedies, as well as jewelry and watches. The botnet has apparently pumped up the volume of spam by recruiting more bots, about 60 percent of which are in Asia, 18 percent in Europe, and 9 percent in North America, according to MessageLabs.</p>
<p>And its spamming volume jumped significantly during the past few days.</p>
<blockquote><p>&#8220;Festi had been fairly invisible in terms of the amount of traffic it was sending out &#8212; each time we would look at it&#8230;it was not featured in the top 10 [spamming botnets],&#8221; says Paul Wood, senior analyst for MessageLabs Intelligence and Symantec Hosted Services. &#8220;We were quite surprised when it started <a style="color: #000066; text-decoration: underline;" href="http://www.messagelabs.com/resources/blog.aspx?link=http://www.symantec.com/connect/blogs/festi-botnet-spins-become-one-main-spamming-botnets" target="new">increasing in significant volume</a> over the last few days.&#8221;</p></blockquote>
<p>But while Festi&#8217;s growth is impressive &#8212; and it&#8217;s now at the No. 5 slot &#8212; it&#8217;s still not in the league of the top five spamming botnets. According to MessageLabs, Grum accounts for 23.2 percent of all spam; Bobax, 15.7 percent; Cutwail, 11.1; Rustock, 10 percent; and Bagel, 8.2 percent. MegaD accounts for 6.8 percent of all spam, according to MessageLabs.</p>
<p>Joe Stewart, a researcher with SecureWorks&#8217; Counter Threat Unit and a botnet expert, says Festi &#8220;looks like it&#8217;s up-and-coming.&#8221;</p>
<p>SecureWorks has a slightly different order in its top five botnets, with Cutwail at No. 1, followed by Rustock, Xarvester, Grum, and MegaD. Stewart says of the spam he monitors, Cutwail, which has a half-million bots, sends 65 percent of spam.</p>
<p>Festi likely infects its victims via drive-by downloads, Stewart says, and it&#8217;s somewhere around 25,000 bots. Its malware is a kernel-based spam bot, too, which isn&#8217;t typical. &#8220;It&#8217;s a little unusual when you see a brand-new spam bot come out already using rootkit capabilities and running directly out of the kernel,&#8221; Stewart says. &#8220;That suggests this person already [may] have&#8230;some experience with spam systems.&#8221;</p>
<p>The good news about Festi is that it&#8217;s mostly a spamming botnet, with no malicious, data-stealing malware. While this might not be considered &#8220;good news&#8221;, it is good news in the fact that it could easily be much worse. So keep your computers safe and up-to-date out there&#8230; and ALWAYS keep your antivirus software updated!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/new-spamming-botnet-on-the-rise/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Where in the World do Viruses Come From?</title>
		<link>http://www.andrewsayshello.com/technology/where-in-the-world-do-viruses-come-from/</link>
		<comments>http://www.andrewsayshello.com/technology/where-in-the-world-do-viruses-come-from/#comments</comments>
		<pubDate>Tue, 08 Sep 2009 00:16:16 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=765</guid>
		<description><![CDATA[The U.S. and Brazil continued their output of spam and viruses through August, although levels have dropped slightly since July, according to security vendor Network Box. An analysis of Internet threats by Network Box in August 2009 shows that which peaked in July (when volumes increased by 300 per cent), are down again at levels seen [...]]]></description>
			<content:encoded><![CDATA[<p>The U.S. and Brazil continued their output of spam and viruses through August, although levels have dropped slightly since July, according to security vendor Network Box.</p>
<p>An analysis of Internet threats by Network Box in August 2009 shows that which peaked in July (when volumes increased by 300 per cent), are down again at levels seen in June (around four viruses per customer, per hour). Spam is also down slightly, averaging around 90 spam e-mails per customer, per hour (from a peak of around 120 in May).</p>
<p><a href="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2009/09/virus.jpg" rel="lightbox[765]"><img class="alignleft size-full wp-image-769" title="virus" src="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2009/09/virus.jpg" alt="virus" width="180" height="119" /></a>The U.S. continues to dominate as the main source of the world&#8217;s viruses, producing 15.9 per cent of all viruses. It is followed closely by Brazil, which produces 14.5 per cent (similar levels to last month&#8217;s 14.1 per cent). Brazil continues to be the biggest source of spam, producing 11.6 per cent of all spam, followed by the US at 8.6 per cent and South Korea at 7.2 per cent.</p>
<p>South Korea remains the biggest source of intrusion attacks, at 17.3 per cent. Phishing attacks also remain high, at 33 per cent of all viruses. This is down slightly from last month&#8217;s 36.2 per cent, but still significantly higher than in June, when phishing attacks made up just five per cent of all viruses.</p>
<p>What a majority of web users today do not realize is that applying patches to their system are the number one way to prevent infections.</p>
<p><a href="http://www.network-box.com/" target="_blank">Network Box</a> lowered its global alert condition to Level 2, saying it has been the lowest in nine months. This means there are limited virus/worm activities, with no major unexploited vulnerabilities or threats.</p>
<p>Mark Webb-Johnson, CTO of Network Box, said: &#8220;The large number of recent vulnerabilities announced by both Microsoft and Apple led to a frenzy of malware activity spearheaded by an unprecedented large number of website defacements. What we&#8217;re now seeing is that those who have already patched are protected and those that haven&#8217;t are already infected &#8212; so the number of new infections appears to have levelled off.&#8221;</p>
<p>Simon Heron, Internet security analyst for Network Box, added: &#8220;Businesses and individuals still need to be alert to threats through the remainder of the summer, particularly phishing attacks. We&#8217;ve seen a huge increase in SQL injection attacks so it&#8217;s important that anyone using Web-based applications or servers keeps their security up-to-date.&#8221;</p>
<p>While threat landscape currently remains stable, Network Box said it will continue to closely monitor and re-evaluate the situation as necessary, especially with Microsoft&#8217;s Patch Tuesday coming next week. Let this be another reminder that keeping your system up-to-date is one of the best things you can do along with using antivirus software to keep you and your system safe.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/where-in-the-world-do-viruses-come-from/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Spammers Have Started to Shorten Their URLs!</title>
		<link>http://www.andrewsayshello.com/technology/spammers-have-started-to-shorten-their-urls/</link>
		<comments>http://www.andrewsayshello.com/technology/spammers-have-started-to-shorten-their-urls/#comments</comments>
		<pubDate>Sat, 11 Jul 2009 11:10:32 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[short]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[twitter]]></category>
		<category><![CDATA[url]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=678</guid>
		<description><![CDATA[Shortened URLs are great for character-conscious Tweeters, marketers who want to track Web site visitors, and even perhaps an opportunity for venture capitalists who are investing in companies such as Bit.ly. But they are also providing a boon to spammers. MessageLabs, a division of Symantec, said today the presence of shortened URLs in spam had skyrocketed [...]]]></description>
			<content:encoded><![CDATA[<p>Shortened URLs are great for character-conscious Tweeters, marketers who want to track Web site visitors, and even perhaps an opportunity for venture capitalists who are investing in companies such as <a href="http://bit.ly" target="_blank">Bit.ly</a>.</p>
<p>But they are also providing a boon to spammers.</p>
<p><a href="http://www.messagelabs.com/" target="_blank">MessageLabs</a>, a division of Symantec, said today the presence of shortened URLs in spam had skyrocketed over the last few days and now appears in more than 2 percent of all spam.</p>
<p><a href="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2009/07/spammers.jpg" rel="lightbox[678]"><img class="aligncenter size-full wp-image-679" title="spammers" src="http://www.andrewsayshello.com/wordpress/wp-content/uploads/2009/07/spammers.jpg" alt="spammers" width="480" height="293" /></a></p>
<p>The company says that the dozens of new URL-shortening services are allowing spammers to evade anti-spam tools that aim at Web domains known for sending spam. The services also inadvertently help spammers trick Internet users who would normally be wary of domain names like, say, Spammy.ru.</p>
<p>Spammers have long relied on redirecting services to mask their URLs. However, the URL-shortening services, which are free and require no registration, save them from having to register for a redirect site and, in some cases, solve a distorted-word puzzle (commonly called a “captcha”) to mask their domain name.</p>
<p>Matt Sergeant, an anti-spam technologist at Message Labs, said the culture of Twitter — with people urgently retweeting links, often without even clicking on them — is sure to contribute to the spam problem in the months ahead. “The entire trust model of clicking on the URL is completely broken,” he said. “You can’t trust any URL on there.”</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/spammers-have-started-to-shorten-their-urls/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Court Orders Spammers To Give Up $3.7 Million!</title>
		<link>http://www.andrewsayshello.com/technology/court-orders-spammers-to-give-up-3-7-million/</link>
		<comments>http://www.andrewsayshello.com/technology/court-orders-spammers-to-give-up-3-7-million/#comments</comments>
		<pubDate>Fri, 03 Jul 2009 12:23:47 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[court]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[scam]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[website]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=595</guid>
		<description><![CDATA[A U.S. district court has ordered key players in an international spam ring to give up $3.7 million they made by sending out illegal email messages pitching bogus Hoodia weight-loss products and a &#8220;human growth hormone&#8221; pill they claimed reversed the aging process. In a Federal Trade Commission (FTC) law enforcement action, the court found [...]]]></description>
			<content:encoded><![CDATA[<p>A U.S. district court has ordered key players in an international spam ring to give up $3.7 million they made by sending out illegal email messages pitching bogus Hoodia weight-loss products and a &#8220;human growth hormone&#8221; pill they claimed reversed the aging process.</p>
<p>In a Federal Trade Commission (FTC) law enforcement action, the court found that the five defendants, located in Canada and St. Kitts, violated the FTC Act and CAN-SPAM Act by participating in the spam operation. The court order bars the defendants from violating the CAN-SPAM Act and from making false or unsubstantiated claims about the health benefits of any food, drug, or dietary supplement.</p>
<p>The FTC charged that the operation used spammers to drive traffic to Websites selling an extract of the Hoodia gordonii plant it claimed would cause significant weight loss, and a &#8220;natural human growth hormone enhancer&#8221; it claimed would reverse the aging process. The FTC alleged that these claims were false or unsubstantiated, and charged the defendants with deceptive advertising in violation of federal law. It also alleged that the spammers sent e-mail that contained false &#8220;from&#8221; addresses and deceptive subject lines, and that they failed to provide a required opt-out link or physical postal address.</p>
<p>The case, filed by the FTC in October 2007, marked the first time the agency invoked the US SAFE WEB Act, a federal law designed to protect consumers from cross-border fraud and deception. The legislation enhances the agency&#8217;s ability to exchange information with foreign counterparts and helps protect consumers from cross-border spam and spyware distribution, as well as Internet fraud and deception. The FTC&#8217;s complaint charged eight defendants &#8212; Spear Systems (a U.S. company), three other corporate defendants, and four individuals.</p>
<p>The FTC settled with three defendants in the case &#8212; Spear Systems and two individuals, one in the United States and one in Australia &#8212; in May 2008. The agency was unable to reach settlements with the remaining five defendants, who are the subject of the court order announced today: Xavier Ratelle and Abaragidan Gnanendran, of Quebec, Canada; and corporate defendants 9151-1154 Quebec, Inc., 9064-9252 Quebec, Inc., and HBE, Inc. The final orders were entered by the United States District Court for the Northern District of Illinois, Eastern Division.</p>
<p>Although this seems to be a win for the good guys, the bad news is that something like this doesn&#8217;t even make a small dent in the problem of spammy emails that flood our inboxes from day to day. We can only hope for more and more of these types of cases to come up because over time, people might actually start to shy away from these methods if the penalties are too high.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/court-orders-spammers-to-give-up-3-7-million/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google Cash Club Steals Info With Phishing Attack!</title>
		<link>http://www.andrewsayshello.com/technology/google-cash-club-steals-info-with-phishing-attack/</link>
		<comments>http://www.andrewsayshello.com/technology/google-cash-club-steals-info-with-phishing-attack/#comments</comments>
		<pubDate>Fri, 26 Jun 2009 23:54:29 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[attack]]></category>
		<category><![CDATA[cash]]></category>
		<category><![CDATA[club]]></category>
		<category><![CDATA[google]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=579</guid>
		<description><![CDATA[I recently came across a form of online fraud that takes the guise of a legitimate-lookng news website. At first glance, the content of the purported news page appears real but after conducting further analysis, one will realize that the news page is actually a spammy site. What’s supposed to be a news article is [...]]]></description>
			<content:encoded><![CDATA[<p>I recently came across a form of online fraud that takes the guise of a legitimate-lookng news website. At first glance, the content of the purported news page appears real but after conducting further analysis, one will realize that the news page is actually a spammy site.</p>
<table style="height: 241px;" border="0" cellspacing="0" cellpadding="0" width="100">
<tbody>
<tr>
<td width="329" height="241"><a style="color: #858585; text-decoration: none;" title="Google Cash 1" onclick="javascript:pageTracker._trackPageview('/outgoing/www.trendmicro.com/vinfo/images/blog/1_googlecash.gif');" rel="floatbox" href="http://www.trendmicro.com/vinfo/images/blog/1_googlecash.gif" rel="lightbox[579]"></p>
<p style="text-align: center;"><img style="max-width: 650px; padding: 3px; border: initial none initial;" title="googlecash1" src="http://blog.trendmicro.com/wp-content/uploads/2009/06/googlecash1.jpg" border="0" alt="googlecash1" width="329" height="241" /></p>
<p></a></td>
<td width="329" height="241"></td>
</tr>
</tbody>
</table>
<p>What’s supposed to be a news article is actually an writeup that explains how Google<em> </em>can supposedly provide online users the opportunity to earn easy money. To make it more convincing, the page also claims to have several positive responses from anonymous online users. Clicking any of the links from the spam website shown above leads to a phishing page.</p>
<p>The page contains a spoofed countdown timer that hopes to make the user panic and quickly fill up the form. Clicking the <em>See If I Qualify </em>button then directs the user to another page containing an affirmation of the user’s qualifications, which will then require him/her to fill up another form with his/her credit card information.</p>
<p>Related phishing schemes have also been found using the same technique but with different keywords other than <em>Google Cash Club</em>. Below are some of the keywords used:</p>
<ul>
<li>Make Money with Google</li>
<li>Google Money Monster</li>
<li>Google Home Income</li>
<li>Easy Google Profit</li>
<li>Google’s Business Kit</li>
</ul>
<p>Inquiries on the legitimacy of the service have been posted on <a style="text-decoration: none; color: #858585;" onclick="javascript:pageTracker._trackPageview('/outgoing/www.google.com/support/forum/p/Web+Search/thread?tid=7baf1bd3d1afa5e8&amp;hl=en');" href="http://www.google.com/support/forum/p/Web+Search/thread?tid=7baf1bd3d1afa5e8&amp;hl=en">Google’s support forum</a>, and I agree with what most of the users have posted: <strong>Google Cash Club is a scam </strong>along with other similar forms of this floating around the internet in different forms of ads.<br />
<span><br />
</span></p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/google-cash-club-steals-info-with-phishing-attack/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook Awarded $873 Million in Lawsuit vs Spammer!</title>
		<link>http://www.andrewsayshello.com/technology/facebook-awarded-873-million-in-lawsuit-against-spammer/</link>
		<comments>http://www.andrewsayshello.com/technology/facebook-awarded-873-million-in-lawsuit-against-spammer/#comments</comments>
		<pubDate>Tue, 25 Nov 2008 03:44:42 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Technology]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[lawsuit]]></category>
		<category><![CDATA[myspace]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=207</guid>
		<description><![CDATA[It seems as though Facebook.com just won a lawsuit they had filed against a huge spammer that has been taking advantage of facebook and its users. This user and his company &#8220;Atlantis Blue Capital&#8221; have been sending out spam messages through the message system that facebook has for its users, but he has used it [...]]]></description>
			<content:encoded><![CDATA[<p>It seems as though Facebook.com just won a lawsuit they had filed against a huge spammer that has been taking advantage of facebook and its users. This user and his company &#8220;Atlantis Blue Capital&#8221; have been sending out spam messages through the message system that facebook has for its users, but he has used it to send out mass spam messages to users to link to his sites where he was obviously trying to make some easy money with. Here is a statement from Facebook:</p>
<blockquote><p>Does Facebook expect to quickly collect $873 million and share the proceeds in some way with our users? Alas, no. It’s unlikely that Geurbuez and Atlantis Blue Capital could ever honor the judgment rendered against them (though we will certainly collect everything we can). But we are confident that this award represents a powerful deterrent to anyone and everyone who would seek to abuse Facebook and its users.</p></blockquote>
<p>Just earlier this year Facebook&#8217;s rival won a similar case which landed them $230 million against the so-called &#8220;Spam King&#8221; under similar circumstances. (<a title="MySpace Wins Record $230m in Case Against 'Spam King'" href="http://blogs.pcworld.com/staffblog/archives/006956.html" target="_blank">You can read the arcticle about it here!</a>) Besides the huge chunk of money that he is now required to pay to Facebook, this person is also banned for life from the website and officials are hoping that this decision will help in deter other people / companies from trying the same thing. But given the difficulty of enforcing such laws around the world, its likely that spam will continue and they will just be coming from other parts of the world. (So you can expect some really bad english to be involved!)</p>
<p>Lastly here is a few examples of the messages he was sending out through facebook (with the URLs changed of course!)</p>
<blockquote><p>Ringtones:</p>
<p><em>I finally found the best source out there for all the latest ringtines for my phone at http://www.spam THey dont sound bad like the ones from my actual phone company, these are 100 times better and they have thousands and thousands of ringers to choose from and when you use them the first time you get 20 free ringtones. Stop paying so much for your ringtones,don’t be a sucker, get them from my place, http://www.spam</em></p>
<p>Male Enhancement:</p>
<p><em>remember i told you about those pills that mike and his brother have been taking that made their pricks larger then life? well i finally got more info on whats been happening. mike have been taking the pills now for 6 months from http://www.spam and his brother about 3 months now. yesterday i found out that you know who has been taking them for the longest time now too, that blew me away. so the secret is out, these enlarge pills really work and more people then i realized are taking them daily. i am thinking of getting some for a certain someone today, they guarentee them 100 percent that they will work or every cent you paid back to you. http://www.spam</em></p>
<p>Marijuana:</p>
<p><em>hey, check this out! you know smoking bud? well there is this site http://www.spam that sells super potent legal bud, yes legal herbal bud for sale online, it doesn’t show up in drug tests or anything either, i started selling this stuff too and am making a killing, they ship it to you discreetly and it’s 100 percent money back guaranteed, this is the site http://www.spam it’s not illegal, but hurry up before they ban it in the states.</em></p></blockquote>
<p>So there you have it, I&#8217;m sure a good many of the people who read this have probably seen these messages or others very similar to these but the good news is you won&#8217;t be seeing them anymore due to the concequences of this lawsuit that this company faces. So we will now get alittle time off from these types of messages until another user / company takes their place in the hopes of finding some loophole to make some quick cash! So be careful out there and watch what you click on!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/facebook-awarded-873-million-in-lawsuit-against-spammer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Major Online Scam and Spam Source Knocked Offline!</title>
		<link>http://www.andrewsayshello.com/technology/major-online-scam-and-spam-source-knocked-offline/</link>
		<comments>http://www.andrewsayshello.com/technology/major-online-scam-and-spam-source-knocked-offline/#comments</comments>
		<pubDate>Fri, 14 Nov 2008 02:47:29 +0000</pubDate>
		<dc:creator>Andrew</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[scam]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.andrewsayshello.com/?p=195</guid>
		<description><![CDATA[On November 11th, it seems that a win for the good guys happened as a major source for online scams and email spam was knocked offline. There appears to have been a web hosting company located in San Jose, CA that was estimated to be the source for around 70% of all online email spam [...]]]></description>
			<content:encoded><![CDATA[<p>On November 11th, it seems that a win for the good guys happened as a major source for online scams and email spam was knocked offline. There appears to have been a web hosting company located in San Jose, CA that was estimated to be the source for around 70% of all online email spam and internet scams. It seems that for the last 4 months <a title="Security Fix" href="http://voices.washingtonpost.com/securityfix/" target="_blank">Security Fix</a> has been monitoring data about the web hosting company known as <strong>McColo Corp.</strong> and when reported their findings to the larger internet provider of the company, they immediately severed the connection for the web hosting company taking them offline completely.</p>
<blockquote><p>A U.S. based Web hosting firm that security experts say was responsible for facilitating more than 75 percent of the junk e-mail blasted out each day globally has been knocked offline following reports from <strong>Security Fix</strong> on evidence gathered about suspicious activity emanating from the network.</p></blockquote>
<p>This is a huge success because already companies who monitor the flow of spam email have seen a ENORMOUS drop in the amount of spam emails (<a title="Spam Email Chart" href="http://www.3dnews.ru/_imgdata/img/2008/11/13/102581.gif" target="_blank" rel="lightbox[195]">click here</a> for chart) that are were being controlled by these botnets. But at the same time others are saying that it is only a matter of time before the people who were hosting their &#8220;services&#8221; with the company will move their operations overseas where it will be much harder to shut down their operations of business. Never less this is a firm step to show that the good guys are still out there trying their best to hunt down the bad guys and help us get rid of these annoying emails that fill out inboxes from day to day.</p>
<p><span style="text-decoration: underline;">Interesting Fact</span>: Only about 1 in 12,500,000 spam emails are actually read by people and replied to but are still managing to bring in about $7,000 a day or $3.5m over a year.</p>
<p><a title="Original Article" href="http://voices.washingtonpost.com/securityfix/2008/11/major_source_of_online_scams_a.html" target="_blank">Click here</a> for the original article!<br />
<a title="Security Fix" href="http://voices.washingtonpost.com/securityfix/" target="_blank">Click here</a> for the Security Fix Website / Blog</p>
<p>So for now enjoy the time without so much spam and hope the good guys keep up the good work and continue to fight to bring down more of these botnet hosts that love to fill our inboxes with all their lovely emails!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.andrewsayshello.com/technology/major-online-scam-and-spam-source-knocked-offline/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
