URLVoid Blog http://blog.urlvoid.com Latest news about Internet threats Fri, 28 Mar 2014 23:03:16 +0000 en-US hourly 1 https://wordpress.org/?v=5.2.3 How to identify fake shopping websites http://blog.urlvoid.com/1333/how-to-identify-fake-shopping-websites/ http://blog.urlvoid.com/1333/how-to-identify-fake-shopping-websites/#respond Wed, 27 Nov 2013 16:08:07 +0000 http://blog.urlvoid.com/?p=1333 When you want to buy something on Internet, you generally search for cheap clothes, or cheap shoes, but that is not always the best way to find a trusted and legit shopping website. Many scam websites are located on the top pages on Google search engine when you search for a brand name followed by […]

The post How to identify fake shopping websites appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1333/how-to-identify-fake-shopping-websites/feed/ 0 Malware: UPS Delivery Notification Tracking Number http://blog.urlvoid.com/1323/malware-ups-delivery-notification-tracking-number/ http://blog.urlvoid.com/1323/malware-ups-delivery-notification-tracking-number/#respond Thu, 24 Oct 2013 23:21:54 +0000 http://blog.urlvoid.com/?p=1323 We recently logged some emails with attached two suspicious files: As you can see, the email has a subject and an address that may seem coming from the UPS, but in reality the email is a scam and it is used to spread as attachment a file named invoiceCM0V9ORWJF23KX8PAP.PDF.exe, that is the executable file of […]

The post Malware: UPS Delivery Notification Tracking Number appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1323/malware-ups-delivery-notification-tracking-number/feed/ 0 Google Translate used by spammers to bypass Anti-Spam filters http://blog.urlvoid.com/1305/google-translate-used-by-spammers-to-bypass-anti-spam-filters/ http://blog.urlvoid.com/1305/google-translate-used-by-spammers-to-bypass-anti-spam-filters/#respond Fri, 04 Oct 2013 11:57:05 +0000 http://blog.urlvoid.com/?p=1305 Google Translate is a free service created by Google that translates any web page, content or document from native language to a language specified by the user that is using the service. We have noticed that some spam messages contain links to websites that use the service Google Translate to translate their page content, but […]

The post Google Translate used by spammers to bypass Anti-Spam filters appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1305/google-translate-used-by-spammers-to-bypass-anti-spam-filters/feed/ 0 Phishing: PayPal Notice of Policy Updates http://blog.urlvoid.com/1281/phishing-paypal-notice-of-policy-updates/ http://blog.urlvoid.com/1281/phishing-paypal-notice-of-policy-updates/#respond Sun, 29 Sep 2013 11:27:39 +0000 http://blog.urlvoid.com/?p=1281 Be aware, we have logged a lot of phishing emails that are targeting PayPal users on these days. The phishing email message looks like almost identical to the real PayPal message, but the link present in the message redirects the user to an URL shortener service. The malicious link present in the email is: hxxp://lnko.in/bhqr […]

The post Phishing: PayPal Notice of Policy Updates appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1281/phishing-paypal-notice-of-policy-updates/feed/ 0 Spam: New Product to Lose up to 15 lbs. http://blog.urlvoid.com/1256/spam-new-product-to-lose-up-to-15-lbs/ http://blog.urlvoid.com/1256/spam-new-product-to-lose-up-to-15-lbs/#respond Thu, 15 Aug 2013 16:15:28 +0000 http://blog.urlvoid.com/?p=1256 We noted an increase amount of email messages that promote a new product that should help people to lose weight. All the email messages we have captured, redirect users to .RU websites used to promote some king of green tea product used to lose weight, that is of course a scam. This is one of […]

The post Spam: New Product to Lose up to 15 lbs. appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1256/spam-new-product-to-lose-up-to-15-lbs/feed/ 0 WordPress-how-to-videos(dot)com Spreads Java Exploits http://blog.urlvoid.com/1184/wordpress-how-to-videosdotcom-spreads-java-exploits/ http://blog.urlvoid.com/1184/wordpress-how-to-videosdotcom-spreads-java-exploits/#respond Sun, 16 Sep 2012 01:13:15 +0000 http://blog.urlvoid.com/?p=1184 When we analyzed few Twitter followers in one of our websites, we noted that there was an user that was following us, see the image: We have analyzed the website (infected): www (dot) wordpress-how-to-videos (dot) com The website wordpress-how-to-videos(dot)com is hosted at BSE Software GmbH and its current IP address is 82.220.34.22 (330.hostserv.eu). The server […]

The post WordPress-how-to-videos(dot)com Spreads Java Exploits appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1184/wordpress-how-to-videosdotcom-spreads-java-exploits/feed/ 0 URLVoid API v2.0 http://blog.urlvoid.com/1175/urlvoid-api-v2-0/ http://blog.urlvoid.com/1175/urlvoid-api-v2-0/#respond Thu, 09 Aug 2012 15:24:51 +0000 http://blog.urlvoid.com/?p=1175 URLVoid API is a free service (for non commercial use) that allow users to query our database of already analyzed domains and receive, in XML format, detailed details about each submitted domain. The URLVoid API supports multiple domains in one single query, so you can submit 250 domains and receive details of each domains in […]

The post URLVoid API v2.0 appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1175/urlvoid-api-v2-0/feed/ 0 Phishing: PayPal Account Review Department http://blog.urlvoid.com/1171/phishing-paypal-account-review-department/ http://blog.urlvoid.com/1171/phishing-paypal-account-review-department/#respond Wed, 13 Jun 2012 11:40:40 +0000 http://blog.urlvoid.com/?p=1171 Phishing email against PayPal users: Header details: Received: from mail14j.g14.rapidsite.net (mail14j.g14.rapidsite.net [128.121.64.175]) Received: from ca1-mx26.mlpsca01.us.mxservers.net (128.121.64.172) by mail14j.g14.rapidsite.net Received: from unknown [128.121.143.147] (EHLO mmm1430.rapidsite.net) by ca1-mx26.mlpsca01.us.mxservers.net (mxl_mta-3.1.0-05) Received: from unknown (HELO mikesmirnoff-%cf%ca.local) (marketing@77.50.19.97) Subject: Account Review Department Date: Wed, 13 Jun 2012 12:27:42 +0400 X-SOURCE-IP: [128.121.143.147] To:undisclosed-recipients:; Content-Disposition: attachment; filename="Account.zip" Attached there is a ZIP […]

The post Phishing: PayPal Account Review Department appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1171/phishing-paypal-account-review-department/feed/ 0 Amazon.com Order Confirmation leads to Blackhole Exploit Kit http://blog.urlvoid.com/1164/amazon-com-order-confirmation-leads-to-blackhole-exploit-kit/ http://blog.urlvoid.com/1164/amazon-com-order-confirmation-leads-to-blackhole-exploit-kit/#respond Sat, 09 Jun 2012 21:40:10 +0000 http://blog.urlvoid.com/?p=1164 We received few emails with subject: Amazon.com Order Confirmation Inside the email message there is a HREF link that redirects users to a malicious web page containing malicious javascript code used to redirect users to the main URL of Blackhole exploit kit: The Blackhole exploit kit URL is: GET /main.php?page=017f3bb5c2be6a41 HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE […]

The post Amazon.com Order Confirmation leads to Blackhole Exploit Kit appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1164/amazon-com-order-confirmation-leads-to-blackhole-exploit-kit/feed/ 0 New Malicious Injected Code: Injection_head and Injection_tail http://blog.urlvoid.com/1156/new-malicious-injected-code-injection_head-and-injection_tail/ http://blog.urlvoid.com/1156/new-malicious-injected-code-injection_head-and-injection_tail/#respond Fri, 08 Jun 2012 22:29:16 +0000 http://blog.urlvoid.com/?p=1156 We have logged few websites infected with a new injected javascript code that seems to target mainly the websites powered with WordPress and Joomla. Below there is a screenshot of the malicious script: As we can see from the image above, the injected code starts with: And it ends with:

The post New Malicious Injected Code: Injection_head and Injection_tail appeared first on URLVoid Blog.

]]> http://blog.urlvoid.com/1156/new-malicious-injected-code-injection_head-and-injection_tail/feed/ 0