Who’s Behind GoatRAT?
In this brief analysis I'll take a look at who's behind GoatRAT in terms of social media activity C&C servers and actual personally identifiable information.Personally identifiable information:hxxp://bit[.]ly/nubankmodulohxxp://goatrat[.]com/apks/apk20[.]apkSample MD5s:6583a9b6b83738e0bf2a261fc04483e18772da3241e467fdef37a8e27b1869a79a8e85cf1bbd32c71f0efa42ffedf1a0hxxp://api[.]goatrat[.]com:3008Social Media:hxxp://t[.]me/sickoDevzhxxp://t[.]me/goatmalwareWeb site: hxxp://criminalmw[.]funhxxp://clientes[.]criminalmw[.]funWhatsApp - +5511987457894ba5833b49e2c6501f5bbce90b7948a85Code Signing Certificate Signed By: Mr[.] Paxton Doyle PhDSSL: 94ba7810ece1a1b227e6a5b509c8bb228e7285a1a5cee5f0ee26542783d4b09aSample C&C servers:104[.]244[.]75[.]74138[.]197[.]166[.]92142[.]251[.]143[.]110142[.]251[.]143[.]129142[.]251[.]143[.]142142[.]251[.]143[.]163142[.]251[.]143[.]193142[.]54[.]162[.]114159[.]69[.]27[.]103174[.]128[.]250[.]164185[.]204[.]1[.]84185[.]225[.]68[.]133188[.]214[.]132[.]49216[.]239[.]32[.]36216[.]239[.]34[.]3631[.]133[.]1[.]10851[.]148[.]150[.]20351[.]81[.]93[.]3780[.]241[.]214[.]10282[.]128[.]229[.]10993[.]115[.]91[.]6695[.]216[.]209[.]129Sample C&C servers:tgutjgo6kvqdst5ock[.]comolbvu5pv2apkc57zfeg[.]comhxxp://h4j7ewfdpwfzg6g6[.]com - 185[.]177[.]206[.]72hxxp://3ajzfjsxou4yzn3jw552dg[.]com - 87[.]236[.]195[.]198hxxp://f53ia7lqhbg54y7xd7ydp3[.]com - 178[.]63[.]41[.]183hxxp://lblhluz7or[.]com ... Read More
The Deepest Gipsy King of Them All? – Yavor Kolev – A Dipshit Courtesy of Republic of Bulgaria on the "International" – "I Have Never Left the Country" Law Enforcement "Scene"
Can you recognize apologies spot a dipship when you see one? Can the recognize the degradation between his teeth or what would some other dipshits courtesy of him that don't exist would consider something that doesn't exist to begin with the very presence of a human being his teeth and ... Read More
Who’s Behind the Conti Ransomware Gang? – Part Two
In a series of blog posts I exposed the "The Top Management of the Conti Ransomware Group's Fashion and Charity Brands" including "Who's Behind the Conti Ransomware Gang" where I also offered an in-depth peek inside "The Conti Ransomware Gang and the Trickbot Cybercrime Enterprise XMPP's and Jabber Account IDs" ... Read More
Who’s Pushing All The "Fake Updates" Malicious Software Using Redirectors and Traffic Distribution and Redirection Systems and Tools Domains?
I've recently observed an increase in compromised or exploited to be precise in the context of abusing unfixed web application flaws such as for instance redirection notifications on high-traffic and high-profile Web sites where the ultimate goal would be to push traffic distribution and traffic management rogue domains part of ... Read More
Exposing North Korea’s IT Worker’s Eden Programming Solutions WMD-Funding IT Services and Solutions Franchise – An Overview
Jessus. This just in and I think I "did it" and I might even apply fore the Rewards for Justice program second time in a row this time believe it or on North Korea's WMD program in terms of tracking down North Korean IT workers that appear to have launched ... Read More
Exposing A Portfolio of Personally Identifiable Email Address Accounts from An E-Shop for Stolen Credit Card Details
Dear blog readers,I've decided to share with everyone a recently portfolio of personally identifiable email address accounts known to belong to users of a popular E-Shop for stolen and compromised credit card accounting details.Sample personally identifiable email address accounts include:collinsescober[.]yahoo.comkerrybarness[.]gmail.comwolk48[.]bk.rubosssss[.]bossy.ccsmokinwetmarley[.]gmail.comelenakrasotka[.]gmx.comroger.moon[.]post.comfrr[.]frr.ruvarmer1982[.]gmail.comr0[.]r0.rumicheal1717[.]yahoo.comkarlsonas[.]safe-mail.netelhenawy5[.]yahoo.comnaemnik1777[.]qip.ruerwinfontilla[.]yahoo.commakteejay112[.]yahoo.comdarkman135[.]gmail.comelisasuiter[.]yahoo.comlob[.]ya.rusuetrel93[.]gmail.comgeforse77[.]gmail.comsteamforyou1[.]yahoo.comhuamao0409[.]yahoo.com.cni7x[.]hotmail.com12345qwert[.]jksdhfj.comtiokpsc[.]yahoo.comownon[.]mail.rujowis5459[.]yahoo.comamnetcom[.]yahoo.frsusiraukes[.]gmail.comcuilizi88[.]gmail.comdedfft[.]gmail.comvbm_uk[.]yahoo.co.ukriktikas[.]yahoo.co.ukpjeanlab[.]gmail.comBrown6926[.]hotmail.comwaldemarfoot[.]ymail.comjamesnterry[.]gmail.commarzelv[.]gmail.comsay[.]0-mail.comelips777[.]yahoo.comzloikak[.]pochta.rusentento[.]yahoo.commnbvcbnm[.]mail.ruy777z[.]mail.rugled123[.]mail.rualiasw[.]hotmail.comerik.sgrs[.]gmail.comwillsresults[.]gmail.comdumpstoday[.]yahoo.comwali_made7[.]yahoo.comcelewolfs[.]hotmail.comcashootmen[.]yahoo.comhonkman28[.]yahoo.combugiman007[.]yahoo.comv[.]camfex.comempty_boys[.]yahoo.comivhbfu176[.]hotmail.comlaq1x[.]yahoo.comnixbella[.]yahoo.comelfuerte809[.]live.comkrasavec5275[.]mail.ruasda1[.]me.combustachek[.]mail.rumyfletch[.]gmail.comsotazynubagyhewo[.]tempomail.frj_kelven1[.]yahoo.comgoodvisa[.]gmail.comdave_boiz[.]yahoo.co.ukwulfear[.]mail.rumilad0936[.]yahoo.comcredit-man[.]hotmail.comj4malz[.]gmail.comsadygaxx[.]mail.rujohnblaseuk[.]yahoo.co.ukmayseller[.]mayseller.comxxxxxx[.]yahoo.comorientalplc[.]live.co.uk933807[.]gmail.comf.antom[.]hotmail.commcd7773244[.]yahoo.com1izard[.]list.rukogdaprokatit[.]techie.commultijam[.]hotmail.comgvozduk1[.]list.ruMark.D.Wood100[.]gmail.comtimleema[.]hotmail.comjadothebest[.]hotmail.comanlarcs[.]yahoo.comlionheart0098[.]yahoo.comgovoro1[.]gmail.comdestrater[.]yahoo.comInsTant[.]bk.ruxgreenx[.]bk.rujohn.kanaiber[.]gmail.comfrancaispak[.]mail.runight_fly_uuu[.]yahoo.comgipson[.]pochta.rujjamesjxx[.]gmail.comjjhustlehard[.]gmail.commors881[.]mail.rujhnts444[.]gmail.comk.markus[.]yandex.combrianburger[.]hotmail.combmw760[.]safe-mail.netsvslip[.]gmail.comdirectdepot[.]gmail.compriedzza[.]inbox.lvgmuler[.]yahoo.comavolosins[.]yahoo.comugmarket[.]yahoo.comcolahn[.]yahoo.comfourb1960[.]gmail.comgiant777[.]safe-mail.netmagomedovmaksim[.]yandex.ruakndl[.]N.commmaj.tony[.]yahoo.comwincunia[.]gmail.comaslike[.]aol.comderikbowl[.]gmail.comdario_nixon78[.]yahoo.dejooncooper[.]yahoo.comumang_ni[.]hotmail.comvan.duel[.]gmail.comlevieux100[.]laposte.netparayan3[.]gmail.comrurushiu[.]yahoo.cnsherpsis[.]live.comz0mbie86[.]mail.rumaestro0022[.]hotmail.comlrabezerra[.]gmail.comj.kelven16[.]gmail.comsmokos[.]mail.runguyenkimhanoi[.]gmail.comWandaPandolfi553761[.]hotmail.comelnino_carder[.]yahoo.comcorpse20092009[.]yahoo.com161085[.]gmail.comvocean2925[.]gmail.comaderistov0[.]gmail.comvmda01[.]gmail.comsico1[.]yahoo.ngsic111k[.]gmx.dedlinnya[.]gmail.compastorcat100[.]yahoo.commadonnalovedream[.]gmail.comtastedick[.]yahoo.comtrafcc[.]ya.ru777[.]graduate.orgresidentevil_xxx[.]yahoo.comjam1982[.]yahoo.comadmin[.]insoul.namejohnyypot[.]yandex.rumagret.canard[.]free.freupetition[.]gmail.comcotedazur06000[.]gmail.rui3i[.]mail.rumagik00[.]live.itxyeglaz1[.]yahoo.com.auqtecvogs[.]gmail.comelectronicstech[.]hotmail.co.ukcashmic7[.]yahoo.co.ukslgamegold[.]hotmail.comlait[.]sibnet.rumantaskazlauskas[.]safe-mail.netnikryl[.]mail.comhotty_stuffin[.]yahoo.comrazorme[.]ymail.commynetthebest[.]gmail.comdongyaju[.]gmail.comuo_jia[.]163.coma.mike37[.]gmail.comyueling77[.]hotmail.comiwandem[.]yandex.rucocl2ph[.]mail.rucookieman-18[.]live.co.ukkenjocarlos[.]yahoo.comterrence[.]virgindsl.co.ukdirchaw[.]gmail.comjen140[.]gmail.comfranksinatratratra[.]gmail.comebay4biz[.]yahoo.comd.speed[.]ovi.comdimon4g[.]mail.ruportado00[.]gmail.comdizvar[.]yahoo.comllopetu[.]yahoo.comschulz.seo[.]gmail.comrasejo83[.]gmail.comgorgedunworry[.]yahoo.comprivod07[.]bk.rufrancisduchat[.]yahoo.comdinokarti[.]yahoo.co.ukwisementalk[.]gmail.comieip39[.]yahoo.comjolopero[.]icqmail.comwabalas1[.]yahoo.co.ukingrosso999[.]googlemail.comhemenhemde[.]yahoo.comstefan_1[.]live.serunninghb27[.]gmail.comzhukraend2012[.]mail.comkastalomikq[.]gmail.comengland0071[.]rambler.rusferzers[.]yandex.rubaloghea007[.]gmail.coma4512517[.]mailinator.coma4512517[.]bofthew.comarunas80[.]mail.comdanielvogla[.]yahoo.co.ukbalogun_olamide[.]yahoo.comkeinehabe[.]hotmail.compolihroniskirkanidis[.]rocketmail.comwemfii23me443sd[.]gmail.comdkponti[.]yahoo.comalice996[.]ymail.comgoodwork11[.]yandex.runarina[.]narina.comlogin4o297[.]gmail.comwackjob[.]rocketmail.comherrmann_kristin[.]yahoo.comkissholy[.]msn.comnazik78[.]gmail.compro_porn[.]bk.ruloki[.]xory.usbillkissen[.]yahoo.comwkd187[.]gmail.comroizman[.]roizman.ruquad45[.]ymail.comantex149[.]yandex.rupatmacc[.]blag.comall.reseller[.]yahoo.comsavilovvk[.]yahoo.comustyk[.]i.uamv.24[.]live.comsightly.1st[.]gmail.comkirilltucsoin[.]yandex.ruvanabsten2[.]gmail.comall.reseller[.]yahoo.co.ukbaochua2004[.]yahoo.comsomeguy_84[.]hotmail.co.uknuodis[.]gmail.comvipcarton[.]gmail.comg00glehack[.]mail.rumetelka1[.]yahoo.comtimoha[.]hotmail.co.ukvipvasja[.]googlemail.combgg798[.]yandex.rustar06[.]ua.fmabudabis[.]writeme.combanksrus[.]gmail.commr.bundles[.]ymail.comnolimitsoldier[.]live.co.ukbidswami[.]mail.ruantonieomir[.]aol.comsamyray15[.]gmail.commllssteve200[.]ovi.comxtreme00[.]email.rumllssteve100[.]ovi.comempirio[.]bk.ruvintnes2006[.]rambler.rumoria4ok[.]nxt.rualljob[.]rocketmail.comlopkjj[.]mail.ruBum3ris[.]inbox.ltvikings20003000[.]gmail.comjeilani08[.]hotmail.co.ukanskier[.]gmail.comnr1md[.]yahoo.comv666ok[.]yandex.rutreiber345[.]yahoo.comgheli66[.]gmail.comalekc97god[.]yandex.rueasymiaki[.]yahoo.comalexenginespb[.]gmail.comlansilnew[.]yandex.ruyadimon79[.]gmail.comsylforte92[.]yahoo.comamonn[.]email.comjahnnojahnnon[.]yahoo.comcockett[.]ymail.comrealforeva[.]gmail.comonyx-94[.]mail.ruRusikbuben[.]yahoo.comsaviakas[.]safe-mail.netspeaker8888[.]gmail.comsashfren[.]gmail.comhormonas[.]gmail.commago10090[.]yahoo.comzero_soft_studio[.]hotmail.comtsemprul[.]live.comhackerday[.]hotmail.comzhirkova.ekaterina[.]yandex.ruseunjoe1[.]yahoo.demazassd[.]gmail.comhia.riyo[.]gmail.comawasthi007[.]ymail.comwgorbin[.]yahoo.comastonish77[.]safe-mail.netiamprince21[.]gmail.commacgbber[.]gmail.comtriang.giang[.]gmail.compapoose4kay[.]yahoo.comdwill77731[.]yahoo.comtemaprikol[.]mail.runoxmall33[.]gmail.comtop_glaxy[.]yahoo.comjokiwan[.]email.comuntracable[.]live.comkutamx[.]gmail.comvarmer1982[.]googlemail.comth3d[.]live.comhaven[.]mamboz.ushudson.andrew44[.]gmail.comdavid200239[.]gmail.comruskan[.]xaker.rudevilzone[.]ukr.netvfnef[.]mail.rucalecsandr[.]ymail.com123tomastomas[.]gmail.comhomam[.]mail.ruklyde208[.]gmail.comsungurk[.]mail.rujumo1995[.]yahoo.commado8770[.]yahoo.combrya0101[.]yahoo.comdzina[.]inbox.ltloslokos[.]mail.rudjose83[.]rocketmail.commanafegor[.]gmail.comonem4n[.]hotmail.compokerstar-medved[.]yandex.ruhhrklwerwruwerjl[.]gmail.comkuhibuiy8017[.]hotmail.comm3rchant2000[.]yahoo.commutinyinside[.]hotmail.comadamjusz007[.]mail.comEfectukazz[.]gmail.comnosound[.]info.ltkaunas2012[.]gmail.comnalukas[.]gmail.comactiveman[.]email.comlaoksis93[.]hotmail.dejoansents[.]yahoo.commarastill[.]Safe-mail.netmofa286[.]gmail.comfernand1695[.]yahoo.frvipnew32[.]hotmail.comrynka.ltd[.]gmail.comdxclub85[.]yahoo.comunshi.star[.]hotmail.comwestmin5196[.]gmail.comtt777tt[.]tt777tt.comqbishon[.]hotmail.commath_master_07[.]yahoo.comniltononly[.]aol.comShehrozs[.]play-more.rukykapeky[.]ymail.comkumertay[.]yandex.ruannawolf29[.]yahoo.comflecha20091[.]hotmail.combols5[.]yandex.rusmirego[.]yahoo.devolfymac[.]eb2a.comkingkon1851[.]aol.comsweetyanastasiya[.]ymail.com1slavik176[.]mail.rudarling.mary2010[.]yahoo.coma4729087[.]bofthew.comeeleeonora[.]hotmail.comkytyzzov[.]mail.ruWestW24[.]gmail.comCFGvidf4334tgfdwxs[.]supermailkwe.jpzeuss_07[.]mail.ruresidentevil1001[.]gmail.com21[.]mail.ruking_yu888[.]hotmail.comkamikadze323[.]hotmail.comomundy1[.]gmail.comawesomeccdealer[.]gmail.combuzzer150[.]gmail.comselivan67[.]gmail.comcatherinebuhagiar[.]ymail.combbugz55[.]yahoo.comcamson[.]mail.ruvmireme[.]gmail.cominnerlinks[.]yahoo.comlifercito[.]gmail.commonet_just[.]yahoo.comjohda[.]cheerful.comvitas1204[.]mail.ruinforthekillmyhead[.]gmail.comicqdark[.]yahoo.comtramvai2006[.]ukr.netpeseuro[.]gmail.comnetcrazycc[.]yopmail.comzbinia[.]gmail.comkarribean2008[.]gmail.comgray2pac[.]play-more.rumaksa1000[.]ya.rujoangame[.]ymail.comsdkoaksd[.]asdasd.rushopinc[.]ymail.commorakot[.]ya.rugeraldpiergeral[.]gmail.compoetlanes[.]gmail.commamboz[.]mamboz.usyury.kindrat[.]mail.ruonotole[.]yopmail.comwhite874[.]yahoo.comdoochey[.]yahoo.comara728[.]mail.ruekort_malikontor[.]yahoo.compokerday[.]googlemail.comwaslet44[.]yahoo.comenigma.cc[.]hotmail.comrealumps[.]yahoo.comwacheive[.]yahoo.commikejayjay12[.]yahoo.co.uksmokinwetmarley[.]aol.comstasiano[.]inbox.rustuart1188[.]live.comdubininn[.]list.rujoker7789[.]gmail.comkimovsk[.]yahoo.comdon_hack2000[.]yahoo.comreetrocksu[.]gmail.comru___94[.]mail.ruhush999[.]safe-mail.netmygitler[.]gmail.comdmjkeee[.]gmail.comigor_struchkov85[.]mail.rumurzilka006[.]mail.ruleva360[.]mail.ruplusdenet[.]yahoo.frvanaimer[.]fastmail.fmmujo[.]hushmail.comsmirnow2008[.]mail.rupowersurfer008[.]gmail.comkhan06chnt[.]mail.rukomalanderson[.]yahoo.commoaeadc[.]me.comdiman3239239[.]mail.runagoyasun[.]yahoo.comvanhal510[.]gmail.comagkaralkan[.]gmail.come.d[.]email.comholder77[.]ymail.comcberushi[.]safety-mail.orgelin[.]safe-mail.netmpcrosley[.]yahoo.comnonohellohi[.]pisda.ruzaqwer[.]zaq.comNikker[.]i.uachemische-entwicklung[.]hotmail.comvn_dong2002[.]yahoo.comnolink[.]usa.comuasno[.]mail.rudvdcog[.]gmail.comdm[.]vunea.eud234turner[.]yahoo.co.ukxboxgamer[.]umail.neta4939257[.]bofthew.comlmushin[.]yahoo.commakaveli025[.]gmail.comhokabura[.]live.comfreedengi[.]mail.rurommel4[.]ya.rucrappy.coding[.]gmail.comcullessah[.]gmail.comolagold57[.]yahoo.comhaizenberg444[.]gmail.comdaviddavids101[.]yahoo.comqibinyine[.]gmail.comkapany3y[.]mail.comcokin99[.]gmail.comzzzzci[.]yahoo.comsukasugarsuka[.]yahoo.co.uksexy-boy0[.]yandex.rupfeyhoa[.]mail.rubundimarda[.]gmail.comgr[.]ll.rumuk_duk[.]yahoo.comsuperbestik[.]yandex.ruforestyara[.]ya.ruelwhin[.]gmx.comcelotajs[.]outlaw.lvab2007[.]mail.ruisaac_bitton[.]hotmail.comkaskadis[.]hotmail.comteam.jonte[.]gmail.comj0sh[.]com.commaki.bosko[.]yahoo.comokepopo1[.]yahoo.comknetterkindje[.]hotmail.commdaster[.]gmail.comvlabaro[.]gmail.comxam07[.]xakep.ruvideomens[.]yandex.ruvery_good[.]tut.bypapadosxx[.]hotmail.comjulio.merdeka[.]gmail.commckmikz[.]hotmail.comwiazo[.]mail.ruFarX[.]bk.rufish_pringles[.]yahoo.comtestuser[.]testuser.rumarkeyy88[.]yahoo.commisuwisu[.]gmail.combytfan[.]gmail.comwizzardpil73[.]gmail.comrm4t[.]usa.comjoseph_acosta33[.]yahoo.comairriga[.]gmail.comJaminikanno2010[.]aol.comjenniferlesperance15[.]yahoo.comnfear[.]hush.comhazelpok[.]gmail.comfrogyblogy[.]gmail.comKasanova11[.]web.deam3rican04[.]yahoo.comksisjei[.]yahoo.comFreakzzor1[.]hushmail.comuzos_is4real[.]yahoo.comsdfsdf[.]ya.ruomg6[.]d2blazingfire.comwoodooflowers[.]gmail.comprident[.]fastmail.fmpurepass[.]gawab.comx.teodor[.]gmail.comolskaty[.]gmail.comIC4rd[.]ymail.comviprile[.]ya.rumr.granz[.]yahoo.comp1asticman[.]yahoo.co.uksmileonmiles22[.]yahoo.comklsbere[.]yahoo.commicklecfs[.]yahoo.com100min100[.]rambler.rublizzer[.]xakep.rudj[.]zahidbaloch.compa3ot23[.]mail.rupatz[.]mail.comwiz3[.]mail.runewman888888[.]gmail.comTnef[.]rambler.ruwekspir[.]yahoo.comvetepocf[.]yahoo.commrsdfs2fs[.]asdfa.comv1rs1759123[.]mail.rupfaction[.]rambler.rugingerme0[.]gmail.comgogi[.]gmx.comforum.xakep[.]bk.ruvaiper[.]europe.comhuren[.]trash-mail.comfixzoom[.]bk.ru22uasno[.]mail.rukoolmichael[.]gmail.comfts.play[.]gmail.comcynepok[.]bk.rupoleznii000[.]gmail.comhafiz.ententeev.w[.]gmail.comwilliamrsherman0022[.]yahoo.comemail265483[.]20minutemail.comjustprettylady[.]gmail.comquattro-party[.]ya.rurodion5[.]yandex.ruroliqq[.]gmail.commrsynopse[.]live.commandaloaqui[.]hotmail.comtombui9110[.]gmail.comliujianxin6[.]gmail.commozartpc[.]googlemail.comafaavik[.]gmail.comchensleynature[.]yahoo.comxxxolomu[.]yahoo.comffkstone[.]yahoo.comerokg333[.]yahoo.comjohnbold56[.]yahoo.compeaceyesto[.]gmail.comvsiachina[.]hotmail.comkatrik[.]yandex.ruarturrartur[.]gmail.compuzzleguru[.]mail.ruquinola[.]quinola.com2345r6ty7[.]gmail.combioduncity4me[.]yahoo.com12_st[.]inbox.rubumpcc[.]hotmail.frromishevilcorso911[.]yahoo.comkanactuly[.]hotmail.comwut4ng[.]live.compranderius01[.]gmail.compalanik90[.]gmail.comasstriti[.]gmail.comccbuya[.]gmail.comrobdmail[.]ya.ruja.man12344[.]gmail.comknightwhosayni[.]mail.rulvziyan89[.]hotmail.comsevkopwnz[.]yahoo.comqsafer[.]ngs.rudixymd[.]yandex.rualistonrandal1[.]gmail.comgirlr[.]mail.ruzaro[.]nur.kzjanne4556[.]yahoo.commentor_tgv[.]yahoo.comsergey_manu[.]pochta.rumoney-mt[.]hotmail.co.ukm.natalia47[.]yahoo.comsymbian85[.]yandex.rufilin510[.]yahoo.comzaycevmatvey[.]gmail.comcoll02eric[.]yahoo.compin992[.]ya.rukapil_baser[.]hotmail.comj.kelven13[.]gmail.comjessewell[.]yahoo.comsmithemmanuel38[.]yahoo.comoutlaw_young972[.]hotmail.combestmarkinc231[.]gmail.comnaonao[.]teewars.orgshizoshizo0[.]yahoo.comadamsiql[.]yahoo.commb.mb83[.]yahoo.comhaev[.]mamboz.uspulseprodz[.]hotmail.co.uknaharut[.]hotmail.comstarbes[.]mail.ruslypaper211[.]yahoo.comninegin[.]yahoo.comolegsdh[.]yahoo.comwinzroot[.]live.comfrangolda[.]gmail.comalpha99[.]rocketmail.comkelvoster147[.]yahoo.comalinutz_bzr[.]yahoo.comemile.danko.is.legend[.]hotmail.co.ukbobmurphy2010[.]yahoo.comrefmg[.]yahoo.comdav.mar1987[.]gmail.comozanadwords[.]yahoo.comicqx[.]mail.rugangstar_jamer[.]hotmail.co.ukblack[.]zatcher.comzozo1917[.]yahoo.comgatkins212[.]gmail.comroll.high[.]yahoo.comgibontuzu[.]yahoo.comlrgdv[.]yahoo.compoulsmith30[.]gmail.comxxworlduser[.]aol.comjallouljilani[.]ymail.comtumpa36[.]yahoo.comcvv2_info[.]yahoo.combayccv[.]yahoo.com555xxx[.]mail.ruawaischaudhry666[.]gmail.comdommovoy[.]gmail.comguarantee4u[.]yandex.ruvirtuagold[.]gmail.combob15[.]inbox.rua6035958[.]bofthew.comyuanzhaitu6849[.]gmail.commakhtanov[.]pc35.ruBig.brownpg[.]yahoo.commoskov1977[.]mail.ruswiftonmetrav12345[.]googlemail.comusaccseller[.]yahoo.comcbbmbnx[.]gmail.compnK-eD[.]hotmail.comkozerac[.]wp.plkebarsanti[.]yahoo.comseanpark26[.]yahoo.comfortwo000[.]gmail.com3JIoe6y4ka[.]gmail.comakkaynti[.]yandex.rudz8888[.]yahoo.comlibertyreserve59[.]yahoo.comlestat223[.]unimob.netha[.]mamboz.us365830[.]qq.complaceb37[.]gmail.comzxcjxq[.]mailforspam.comyahooservicee[.]gmail.com123456[.]yahoo.compaypalll[.]yandex.rublablalalala83[.]yahoo.comcroakworring[.]yahoo.commarionxscruceoo[.]hotmail.comibmsb[.]mail.rumido_sabry65[.]live.comtravismatic[.]yahoo.comsconzy_stone[.]yahoo.comguned2[.]yandex.rukokosasbobosas[.]yahoo.comToravitchP[.]gmail.comrefcatg[.]gmail.commafiozo123[.]ukr.netarsenij.san[.]gmail.comanikey1805[.]mail.rudomps4money[.]yahoo.compremehta[.]aol.comslipanastasia[.]yahoo.comguesswhoxy[.]safe-mail.netjonvikuku[.]yahoo.co.ukmichaelsmith19801980[.]googlemail.commaksa100[.]ya.ruwalaco_invest[.]yahoo.comabc656146[.]hotmail.comlisterbobby[.]yahoo.competerreuter1[.]web.dethelolman10[.]yahoo.com13ac9h9[.]gmail.comimport-torg.logistik[.]yandex.ruxqwzts[.]mailcatch.commamaev-ss[.]rambler.rustavrakisstavros[.]yahoo.comfranco[.]yahoo.eseri[.]k0ssu.combomlacdan[.]yahoo.comroycejone[.]yahoo.frdisajonbuiasdbsaui[.]hotmail.comxpyh[.]inbox.ruBorisovslav[.]gmail.comfreshscvv[.]mail.rufront2so[.]yahoo.comalexsf1[.]safe-mail.netC-James[.]Hotmail.com14bepmaxt88[.]mail.rudidier_boka05[.]yahoo.comslidsmall[.]gmail.comromakrokn[.]gmail.coma.rustY[.]mail.ruroughryder912[.]yahoo.comdawg1965[.]hotmail.comstud55hv[.]hotmail.comtrickzz[.]gmx.netbankcard[.]bk.rusdred[.]mail.ruoleg0202_11[.]yahoo.comdasacas[.]aol.commcknightdfbasil[.]gmail.complayo[.]olleik.netradarobarra[.]hotmail.comdownoffzero[.]gmail.comhuynh184[.]sonlanews.comlolekz[.]ya.rumpshane26[.]yahoo.com2thug4life[.]gmail.comalbun[.]privates.comuniversal005[.]gmail.comlobster909[.]yandex.rukondratceva[.]mail.ruezr2run[.]gmail.com2petroo97[.]googlemail.comsokol1122[.]gmail.como986046666[.]gmail.comleversalt[.]yahoo.comprizeel[.]ya.rufrozen8rone[.]gmail.comleanmoney[.]live.co.ukcookieman18[.]live.co.uksdhfbhbbdb[.]b.netvzla2010[.]live.comboom32mi[.]jabl.comtrytolove02[.]163.comjosephmullens41[.]yahoo.comblubbbb[.]blubbbb.comnaderlolz[.]hotmail.combullockss[.]gmail.comnioppo[.]web.dehj5418[.]gmail.comstonelo[.]live.comcdg[.]inbox.rupetrushvosemj[.]gmail.comredeyes.vn1[.]gmail.comxamt[.]rambler.rurav3r_boy[.]yahoo.comrichard[.]softfilerecovery.comdunstall123[.]yahoo.comlove_for-sale[.]hotmail.comem-porras[.]hotmail.comnovaslounge[.]gmail.comaleksandr-tarabantov[.]yandex.rufragnatic[.]tut.byjx06jx06[.]gmail.comdjtoka718[.]yahoo.comlogas10[.]yahoo.comyremzi12[.]gmail.comjohn23[.]yahoo.comkitten.marinka[.]gmail.comcakepresslive[.]live.comlockman1470[.]yahoo.comyoung1010[.]live.co.ukbreng_me_do[.]live.nlstephenbellsten[.]yahoo.commoldman[.]cainari.infobetter1512[.]yahoo.comazixdesign[.]gmail.combillmaster9000[.]gmail.compulsered[.]yandex.rukrissyspect[.]yahoo.comskarzman[.]yahoo.comSSL2010[.]bigmir.netNo_RF[.]yahoo.comvlue[.]cust.inzmax2007[.]gmail.combaskija2002[.]yahoo.comflakron[.]pse-zone.deAnsar-27[.]live.co.ukachilledj[.]hotmail.comlakersice[.]yahoo.comstrakyxp2005[.]yahoo.comluxenw[.]yahoo.compolininandrey[.]gmail.comgaribaypeter[.]hotmail.comedumurphy[.]aol.comhotlips1[.]mail.rudukestar[.]yandex.rugod118[.]gmail.comna.nail23[.]yahoo.comhello[.]spam.sumr.k0sten[.]mail.rueee[.]0815.ruwdye8yd23d[.]mailforspam.comg2frost[.]yahoo.comzalala13[.]yahoo.frnepopsa[.]rambler.ruteknique007[.]gmx.co.ukL0gica1[.]mailcatch.comwww.poster[.]list.ruydem2681[.]gmail.comsurecash_2008[.]yahoo.comandreasfalk2[.]web.derbklove[.]mail.ruwendys788[.]gmail.comst1m41k3[.]gmail.comvital007791[.]mail.ruwww.diesel.elcat.kg[.]mail.rusr_del[.]hotmail.comhackmorgan[.]yahoo.comgrim6681[.]gmail.compatrick_wachsmann2001[.]yahoo.comsakh-oleg[.]yandex.ruaba2009[.]live.combmf32[.]bk.ruserv2serv[.]yahoo.comstri17[.]gmail.comkeemodas[.]yahoo.comaccan4[.]inbox.lvmmjj420[.]gmail.comyname000[.]yahoo.comCyberMew[.]gmail.comscorpinok[.]mail.rupericle_mc[.]yahoo.comottodx[.]gmail.comfrimen1991[.]gmail.commrsupermtl101[.]gmail.comabclovve[.]gmail.comanac0689[.]gmail.comErnestoArgent[.]yahoo.comaltyme[.]hotmail.comyouyousniper[.]gmail.comibiza2010[.]hushmail.comcardinghackerz[.]Yahoo.comboxo.7777[.]mail.ruladykiller[.]secure-mail.biztatjana.kraft.74[.]gmail.comrealready456[.]Yahoo.comchungwing16[.]yahoo.cabayo400[.]yahoo.comkorkebuchik[.]yahoo.comiiceholod[.]googlemail.comcooljtl_006[.]yahoo.commolnickov[.]yandex.runeyodudu117[.]yahoo.comkokolayes[.]yahoo.comdonsteps001[.]yahoo.co.ukjaydotman7[.]hotmail.co.uklamy[.]gmail.comsdfhsdfasd3[.]yahoo.jpsonneone[.]gmail.comvalid5555[.]yahoo.commyhope11[.]yahoo.comimmortalblinks1[.]yahoo.comgodprox[.]mailxps.comstfuorboss[.]live.comjeremymann[.]juno.comsansanek[.]mail.ruserserych[.]mail.rualex.peterson35[.]yahoo.comfish_pringles1[.]yahoo.comshadow.ekzot[.]gmail.coms580780[.]gmail.comexamplepost[.]gmail.comcypriotryder[.]hotmail.comwebmonster2004[.]gmail.comvenganceismineitsthatstime[.]yahoo.comkookers8[.]gmail.comdrumps[.]ymail.comkashin[.]live.co.uklraccount2[.]hushmail.comcocaine[.]thesecure.bizserp95[.]yandex.ruashpinboris[.]gmail.comp-ex[.]ya.ruromka.ch[.]gmail.comrearbird_mikew[.]yahoo.com14revolt88[.]gmail.comeugenio.1981[.]mail.rull_peterli[.]hotmail.commaury1[.]hotmail.dedonpidas[.]yahoo.frsport4biz[.]rocketmail.comdednbteam[.]gmail.comwcvroom[.]yahoo.commr_money[.]yahoo.camr_money139[.]yahoo.cahahahapt89[.]yahoo.comgood234money[.]gmail.comrafer_kr[.]mail.ruqwedc[.]yandex.ruteroristu[.]gmail.comivanp47[.]gmail.commr.terrythomas[.]gmail.comalim[.]rbcmail.rupalchicovsuper[.]mail.ru306536[.]mail.rukrendelyok761[.]MAIL.rufor_bizz[.]yahoo.comirinalonely2010[.]gmail.comusa2009[.]hotmail.comsellercvv40[.]yahoo.frsmtimur[.]yandex.rulionsi7[.]yahoo.commtl51450[.]hotmail.frmrklein11[.]gmail.comfranklinbrues[.]yahoo.comstrasmithy[.]gmail.comrobgotrobbed[.]google.comrobertloushia[.]yahoo.comsimmonooka[.]gmail.comnig.king[.]yahoo.commart.bank[.]yahoo.comjoand_rcc[.]hotmail.comtokashimika[.]yandex.ruCourtneyLXX[.]gmail.comccaddict[.]safe-mail.netregbox[.]list.ruzxynrg[.]gmail.comrubecks[.]gmail.comwil.maximus[.]yahoo.comasatellecom[.]gmail.comrolandasjob[.]gmail.comwholeworld62[.]yahoo.combad_black_4life7[.]safe-mail.netsthaykins101[.]yahoo.comhamza.323[.]hotmail.commilitant999[.]safe-mail.netjossanfine[.]gmail.comshazmoh[.]ymail.comlkpark[.]mail.ruasdafasd[.]yahoo.comrussiaxl[.]hotmail.co.ukraterumer[.]gmail.comsusanneon[.]gmail.comtaneshafede41[.]hotmail.commr.softwares[.]yahoo.comrobgotrobbed[.]googlemail.comnordic[.]hush.comsneeptra[.]hotmail.chmail[.]mail.cnhotdouble[.]hotmail.comWfholdinginfo[.]yandex.rugrion001[.]gmail.comdadaampy[.]yahoo.comgccman10[.]yahoo.comxcomp555[.]gmail.comgaudi.grey[.]gmail.comfolimonav[.]hotmail.comzopa[.]mail.comscoty_to_hoty[.]inbox.lvglobal.saturn[.]yahoo.comedith_bimpong[.]yahoo.comdave.busher[.]yahoo.comminoretka78[.]yahoo.compokercosanostra[.]gmail.com ... Read More
Can You Recognize This Guy?
Dear blog readers,There was a speculation approximately a decade ago that I went missing. Can you recognize this guy in the picture? If you want to look for him try asking these people as this is me circa 2009 when I was illegally arrested without a warrant and detained for ... Read More
A New Kristina CS DIY Ransomware Spotted in the Wild
I just came across to a new DIY ransomware offered within the cybercrime ecosystem. Priced at $2,500 it also offers something I haven't seen in a while in specific for a ransomware cybercrime ecosystem proposition namely its self-propagating features.Sample description:Этот билд не безызвестный криптолокер/вымогатель/шифровальщик, шифрует все файлы ПК за исключением ... Read More
A New DIY Grim Android Botnet Spotted in the Wild
I just came across to a newly released DIY Android Botnet with some pretty interesting built-in features including the use of mobile-based ransomware device locking capability including to offer the attacker the capability to take full control of the Android device for various purposes.Sample screenshots: Sample description:Sending SMS.Launch USSD.Application launch.Change URL ... Read More
A New CINOSHI Cryptocurrency Stealing Malicious Software Spotted in the Wild
I just came across to a newly released cryptocurrency stealing malicious software as a service cybercrime ecosystem proposition which has a lot of cryptocurrency and related accounting data stealing capabilities. Sample screenshots:Sample description:Cinoshi — это MaaS (Malware-as-a-Service) проект, который предоставляет своим клиентам функционал стиллера, ботнета, клиппера и майнера. Весь ранее озвученный ... Read More
