Archive for the ‘Fraudware’ Category

Black Market of Malwares

Friday, January 18th, 2008

Viruses, malwares, and online scams are nothing new to the online community. But we still have to keep our eyes open to these. VNUNET.com just recently had news on an onine “black market” that threatens online users and their security.

It is said that they have a system of their own, with the effect of subverting and corrupting legitimate online businesses. Their system is actually similar to those of legal businesses (online and offline). They’ve got their labor force in different divisions, competitive prices, etc.

Online Crime of Malware

Viruses, spyware, trojans are first made by malware writer. In marketing these, the writers label their products “for educational purposes only” to provide themselves some immunity from prosecution.

The malware writers sell their codes and customers can subscribe to updates to ensure that the malware evades detection. The updates would mean additional payments per month.

Then there is the middleman, who buys the malware and uses the services of a botnet owner to spread it and infect other computers. When it has been spread, the middleman can start collecting stolen information and identities. These information are then sold.

The malwares are sold for as little as $250, with the updates costing around $25 a month. Identites sold costs around $5 and this already includes the name, address, a passport or driving license scan, credit card numbers, and bank account details. For the credit card numbers, the middleman gets money by selling it between two to five percent of the remaining credit balance of the cards.

Like every other businesses, the malware market also has some heavy competition within. And like every other businesses, competitive prices drive sellers to offer higher levels of services. There are people in the market who buy identites that are sorted by country, industry, etc. Other services in the market include guarantees and escrow accounts for the thieves to avoid getting ripped off.

You can see by their system that there is a sophisticated growth and continuous development in their market. Due to competition and the “legalities,” the quality of the products are further improved. The malware have to be undetectable by the current antivirus programs, for one, and when new antivirus updates come out, the malware writers will also supply an update of their malwares to the buyers.

All the more reason why this matter is becoming serious. Malware is starting to get more common across the Internet. Another big problem is that while the malware writers know of the latest antivirus updates, the antivirus program makers do not know theirs. The onle solution thought of today to counter this malware attack is for security program developers to combine their strengths and improve their own products above the level of the malware.

Top 10 scams of 2007 to be aware of this year..

Wednesday, January 9th, 2008

1. Check scams - Receiving a check in the email for allegedly winning in the lottery ,sweepstakes or any other promotions.

2. Advance fee lenders - They try to contact people through phone after filling up an online form of loan application or have found an advertisement in a local newspaper.

3 . Online employment offers - A void job opportunities looking for “shipping” or “billing managers,” “payment processors” or anything with a financial sounding name often turn out to be fraudulent listings that are, in actuality, looking for victims to commit money laundering.

4. Lottery/sweepstakes notification letters - Epidemic in proportion, these are very much like the fake check scams.

5. Overpayment scams - Usually found in online forms especially ads and typically in places such as Craigslist or other classified forums on the Internet.

6. Mortgage foreclosure rescue scams - They usually contact residents and offer them a desperate plan that is affordable and supposedly allows them to keep the home.

7. Marketing/investment scams - Solicited mail or e-mail and saying they can make thousands of dollars working from home by buying a special kit, book or tape collection.

8. Inheritance scam - email that is being sent to the victim from someone claiming to be related to them or from somebody that claims to know that the victim’s distant relative is either very sick or has died and left inheritance money.

9. Phishing scams - Generally, e-mails are sent from what looks like a legitimate bank or financial institution, asking for confirmation of account numbers and personal information.

10. Nigerian scam - An email or letter sent from someone claiming being an official or agent from a foreign country, informing the recipient he or she is seeking a foreign company or individual into whose account they can deposit funds left over from government funds, a business bank transaction or a confiscated family inheritance.

Source: CourierNews

Fraudware Special Report

Tuesday, November 13th, 2007

This video is about a special report on a what had happened to Beatrice Ochoa, whose computer was infected by the notorious Winfixer after she purchased and downloaded it online.