I’m sharing some information here wondering if anyone can identify the criminal affiliate program at the root of this scam service.
The scam begins with what seems to be an automated bot-response posted on Facebook. One of the outstanding questions — can anyone identify a bot that is making these spammy posts? These are a few examples from many thousands observed over the past week.
We’ll just do one walk through here, but each of these functions in the same way. The spam post, which often will be added as a comment to a publicly shared post that mentions a movie, links to a Facebook page. Let’s walk through the Ogbani Wanyu post first.
Recently popular movies have Facebook pages created that claim to offer the ability to watch full movies and share a shortened URL, usually bit.ly links, but we’ve also seen Goo.gl links.
| http://anuapambuh001.blogspot.com/ |
| http://anyar456.blogspot.com/ |
| http://asdfghjkfdgsdfaf.blogspot.com/ |
| http://avengerinfiniitywar.blogspot.com/ |
| http://avengers—boxoffice.blogspot.com/ |
| http://avengers–infinity–war.blogspot.com/ |
| http://avengersmarvell.blogspot.com/ |
| http://avenjerinfinitiwar2018.blogspot.com/ |
| http://birudihatiku33.blogspot.com/ |
| http://blackoval21.blogspot.com/ |
| http://boxoffic—download.blogspot.com/ |
| http://boxoffice—-movie2018.blogspot.com/ |
| http://boxoffice–acrimony–hd.blogspot.com/ |
| http://cap-halloween2018.blogspot.com/ |
| http://ciaxs-movie.blogspot.com/ |
| http://cilokdicolookk505.blogspot.com/ |
| http://cimenkabbook404.blogspot.com/ |
| http://deaaddpolll.blogspot.com/ |
| http://deadpooll2freehd.blogspot.com/ |
| http://fastlifepainpayne.blogspot.com/ |
| http://filmimdb112.blogspot.com/ |
| http://gghocher.blogspot.com/ |
| http://gomovieonline90.blogspot.com/ |
| http://goo212.blogspot.com/ |
| http://happytoenjoythemovie.blogspot.com/ |
| http://home–boxoffice.blogspot.com/ |
| http://jarwogembung.blogspot.com/ |
| http://kicebboong19.blogspot.com/ |
| http://kolangkalingeduarew.blogspot.com/ |
| http://kopisusuhitamkupu2.blogspot.com/ |
| http://kurakurabuntung.blogspot.com/ |
| http://liernjink.blogspot.com/ |
| http://madea—lionsgate–boxoffice.blogspot.com/ |
| http://madeamovielionsgate.blogspot.com/ |
| http://madeamoviie.blogspot.com/ |
| http://mercyduffyunik.blogspot.com/ |
| http://minininin21.blogspot.com/ |
| http://moviekadutgood.blogspot.com/ |
| http://moviesonlain212.blogspot.com/ |
| http://moviestriming2018r.blogspot.com/ |
| http://moviestriming222.blogspot.com/ |
| http://nylenehnjk.blogspot.com/ |
| http://oleholehemas.blogspot.com/ |
| http://putlokeress12334.blogspot.com/ |
| http://ratuangin79.blogspot.com/ |
| http://rekuripure.blogspot.com/ |
| http://septiselviana.blogspot.com/ |
| http://tanduransubbur.blogspot.com/ |
| http://tero-retewgold.blogspot.com/ |
| http://terogew-oleb.blogspot.com/ |
| http://the-golden-of-madea.blogspot.com/ |
| http://the-venom-movie-online21.blogspot.com/ |
| http://thebeastmovies2018.blogspot.com/ |
| http://thefirstpurgehd.blogspot.com/ |
| http://top-movie-newsmadea.blogspot.com/ |
| http://trainemovies.blogspot.com/ |
| http://transparanmovie.blogspot.com/ |
| http://tyler–e–perry.blogspot.com/ |
| http://tylerperry55.blogspot.com/ |
| http://venom-movie-hd2018.blogspot.com/ |
| http://welcome-tyler-perry21.blogspot.com/ |
| http://wwwtyllerperry.blogspot.com/ |
| http://zoss01.blogspot.com/ |
| https://beastacrimony.blogspot.com/ |
| https://camat-jos.blogspot.com/ |
| https://inditinditanbae.blogspot.com/ |
| https://luckgd69.blogspot.com/ |
| https://madea-infamily.blogspot.com/ |
| https://mocmov.blogspot.com/ |
| https://reta-x.blogspot.com/ |
| https://wakandawakandablackpanther.blogspot.com/ |
*** This is a Security Bloggers Network syndicated blog from CyberCrime & Doing Time authored by Gary Warner, UAB. Read the original post at: http://garwarner.blogspot.com/2018/05/affiliate-movie-streaming-scam-service.html
Leading UK Credit Card Consumer Finance Company Uses Advanced Graph Analytics to Intercept Fraudulent Credit Card Applications, Boost Anti-Fraud Efforts…
Digital+ Partners Leads Continuation Funding Round in Growing Automated Threat Analysis & Detection Provider, Closing its Series B Round at…
For three years OpenWRT had a severe validation problem with its download package manager, until a fuzz tester found and…
It’s time to say a final “Goodbye” to Flash. (Or should that be “Good riddance”?) With earlier this week seeing…
1. Be a student of (information security, network security, cyber security). Always strive to know what the latest tactics, trends,…
This is the second in a series of blog posts that discuss how smart DNS resolvers can enhance ongoing network…
