compromised

Bad sushi: China-nexus phishers shift to residential proxies

| | Abused, compromised, Spam
Earlier this year, Spamhaus researchers observed a major shift in phishing targeting Japan. Starting in April, a China-nexus threat actor began using residential proxy networks to send phishing emails instead of subnets ...
The Spamhaus Project

Spammers Love Mobile Phone IP Space. Here’s How to Fix That.

| | compromised, Malware, Service Providers, Spam
Mobile phone companies are leaving the door wide open for spammers. They’re hurting their own customers (and the rest of the Internet) - but there’s still time to fix this ...
The Spamhaus Project

Sex education in the classroom? Google can help, but there is a compromise!

| | compromised, Investigations, Service Providers
It’s not uncommon for popular services to eventually fall victim to abuse. In this case, we explore how spammers are using Google Classroom to lure their victims (at elementary school!) to dating ...
The Spamhaus Project
There's no such thing as a "free" app!

There’s no such thing as a “free” app!

| | Abused, compromised, DNSBL, IP Reputation, Spam
Downloading a free application and installing it on an internet-connected device can lead to you not being able to send email. This is because some apps allow third parties to access your ...
The Spamhaus Project

Let’s talk about the danger of residential proxy networks

| | Abused, compromised, Malware, Spam
In our experience, residential proxies are an often overlooked security threat; one that can be very difficult to remediate for the end user who -in our experience- is entirely unaware of its ...
The Spamhaus Project
The holiday hack – a reminder of why you shouldn’t always trust emails

The holiday hack – a reminder of why you shouldn’t always trust emails

| | compromised, email security, Fraud, Phishing
Here’s a cautionary tale to anyone and everyone who uses email. The learning is simple: Always be vigilant, especially if its content asks you to provide personal information or click on links ...
The Spamhaus Project

When doorbells go rogue!

| | Abused, compromised, IP Reputation, Malware, Spam
Here's a story of doorbells, specific software development kits (SDKs), proxies, and miscreants using your home network to send spam ...
The Spamhaus Project

Using OMI on Microsoft Azure? Here’s an update you need to read

| | compromised, IP Reputation, Malware, Threat Intelligence
An easy-to-exploit security vulnerability that allows remote code execution (RCE) on virtual machines where Open Management Infrastructure (OMI) is installed has been observed. Users need to take action ...
The Spamhaus Project
Wordpress compromises: What's beyond the URL?

WordPress compromises: What’s beyond the URL?

| | compromised, Domain reputation, Spam, Website Security
One of the many tricks in the modern cybercriminal miscreant's toolbox is using compromised websites to evade spam filters and domain reputation systems. Whether hiding a web-based exploit or just getting a ...
The Spamhaus Project

Emotet is disrupted, but the malware it installed lives on

| | Abused, Botnet C&C, compromised, Malware
The successful takedown of the Emotet C2 infrastructure announced January 27th 2021 is no small accomplishment, both from a technical point of view and for the larger safety and security of the ...
The Spamhaus Project
Load more