CAUCE Spamfighters Rally Against Corona Health Fraud Affiliate programs
My email box is full of Coronavirus / COVID-19 frauds and scams. I have Corona malware disguised as product catalogs. I have fake World Health Organization emails asking me to donate my Bitcoin to them. I have more than 30 fake breathing mask selling websites that my friends at ScamSurvivors ... Read More
What sites is Trickbot targeting?
Its been a while since we decoded Trickbot configs to see what banks and organizations were being actively targeted. While recently most of the news about Trickbot has been how it drops the Ryuk Ransomware, and that is certainly important, we can't forget that Trickbot is first and foremost a ... Read More
IC3.gov 2019 Internet Crime Report: Its All About that BEC
For years I have been encouraging people to report their instances of Cybercrime to the FBI's Internet Crime & Complaint Center, IC3.gov. Based on the number of reports, people are finally doing just that. The growth in reporting over the last two years is remarkable -- driven in part by ... Read More
How does a government censor the Internet? A rare peek from Jammu and Kashmir
From time to time we hear that a totalitarian government has locked down Internet access for a part or all of their country. Normally, that is about all we hear about the situation. In the case of India, not normally thought of as a Totalitarian government, we have a unique ... Read More
Iranian APT Group Overview
Today the Birmingham InfraGard Chapter and the Alabama ISSA held a joint meeting featuring a presentation from the Cybersecurity & Infrastructure Security Agency, part of DHS that was formerly known as the NPPD. I learned of a ton of offerings from CISA.gov at the meeting, so I want to start ... Read More
Backdoored Phishing Kits are still popular
What did you do for the holidays? If you're a cybercrime geek you probably took advantage of some of the extra time on your hands to investigate some new phishing sites, right?Jone Fredrick is the type of Facebook user who is quite open about his criminal activity. He boasts about ... Read More
Air Peace CEO charged with millions in money laundering re-buying planes he already owns
The Department of Justice announced last week that they were indicting the CEO of Air Peace for bank fraud and money laundering. I had some difficulty finding the indictments for this case on PACER. It turns out I couldn't find it in PACER because the court system decided that "Allen ... Read More
Facebook’s Transparency Report: (Expert) Supervised Machine Learning Works!
Last summer the BBC technology program "Click" came to visit the lab for a special called "Can Technology Solve the Opioid Crisis?" One of the points we stressed with @NickKwek was that when we report opiods and fentanyl-related posts to Facebook the objective is not to take down THAT POST, ... Read More
‘Tis the Season for SCAMS!
A recent project that DarkTower worked on was related to fraudulent marketplaces offering too-good-to-be-true deals on electronics. DarkTower's CEO Robin Pugh took those lessons and applied them to a recent online shopping experience ... I asked her to write it up for our blog:As I was browsing some of my ... Read More
Business Email Compromise (#BEC) Email Forwarding In Action
DarkTower President Robin Pugh was chatting with a friend who is the VP of Operations for her family business. She mentioned as an aside that their email had been hacked, and of course, Robin’s cybercrime-fighter ears perked up. The friend went on to explain that one of her clients, a ... Read More
