Slashdot Mirror

← Back to Domains

Domain: barracudalabs.com

Stories and comments across the archive that link to barracudalabs.com.

Comments · 5

  1. Eat your words: Cryptowall's from malvertising by Anonymous Coward · · Score: 0 · on Symantec Antivirus Products Vulnerable To Horrid Overflow Bug (zdnet.com)

    Zedo specifically & malvertising stopping's a HUGE PART of what my program prevents infection from - C&C list to stop it versions 1.x-4.x:

    1.x (source https://barracudalabs.com/2014... )

    hindustantimes.com, bollywoodhungama.com, one.co.il, codingforums.com, mawdoo3.com, zedo.com, c1.zedo.com, c2.zedo.com, c3.zedo.com, c4.zedo.com, c5.zedo.com, ss1.zedo.com, static.rcs7.org, xenon.asapparts.com, rcs7.org, asapparts.com

    2.x-3.x (source http://blogs.cisco.com/securit...):

    paytordmbdekmizq.tor4pay.com, tor4pay.com, paytordmbdekmizq.pay2tor.com, pay2tor.com, paytordmbdekmizq.tor2pay.com, tor2pay.com, paytordmbdekmizq.pay4tor.com, pay4tor.com,
    eportfolio.ccpullman.ca, ccpullman.ca, www.mg-unterburg.ch, mg-unterburg.ch, www.sportantiques.co.uk,
    sportantiques.co.uk, www.drk-wettringen.de, drk-wettringen.de, www.rock-times.com, rock-times.com, www.footstepphotography.co.uk, footstepphotography.co.uk, www.choosingcruising.co.uk, , choosingcruising.co.uk, www.felixwoman.com, felixwoman.com, www.projetorideal.com, projetorideal.com,
    www.jimcole.be, jimcole.be, www.jes.or.at, jes.or.at, or.at,
    artpartner.cz, www.meihuainfo.com, meihuainfo.com, www.grekiskaforeningen.com, grekiskaforeningen.com, www.cup-neumann.de, cup-neumann.de, ww.areaverda.com, areaverda.com, , www.yemekyapmak.com, yemekyapmak.com

    4.x (source http://www.tripwire.com/state-... ):

    abelinda.com, purposenowacademy.com, mycampusjuice.com, thegingod.com, yahoosupportaustralia.com, successafter60.com, alltimefacts.com, csscott.com, smfinternational.com,
    lexscheep.com, posrednik-china.com, ks0407.com, stwholesaleinc.com, ainahanaudoula.com, httthanglong.com, myshop.lk, parsimaj.com, kingalter.com, shrisaisales.com, cjforudesigns.com, mabawamathare.org, manisidhu.in, adcconsulting.net, frc-pr.com, , localburialinsuranceinfo.com, smfinternational.com, 3wzn5p1ylumh7ak.j.paypartnerstodo.com, j.paypartnerstodo.com, paypartnerstodo.com, 3wzn5p1ylumh7ak.j.allepohelpto.com, j.allepohelpto.com,
    allepohelpto.com, 3wzn5p1ylumh7ak.j.barklpaypartners.com, j.barklpaypartners.com, barklpaypartners.com, 3wzn5p1ylumh7ak.j.maverickpaypartners.com, j.maverickpaypartners.com, maverickpaypartners.com,

    * What's that you said that my program doesn't stop "Common Ransonware Threats"?

    APK

    P.S.=> My last post also puts down another 'variant' of it in CryptXXX / Locky... want JAKU too? apk

  2. What are the odds? by Iamthecheese · · Score: 0 · on Twitter Adds Tool To Report Tweets To the Police

    An internet bully's power is the attention he is given. Ignore her and he'll go away unsatisfied. I want to believe this can be a force for good; that only real, credible threats that deserve the attention of the police will be reported. But I know that won't be the case. Either this will generate so many reports that it will be utterly ignored or, much worse, there will be political pressure to respond inappropriately to tweets that should be ignored.

    Anyone seriously intent on harassing someone using Twitter will spend the tens of dollars for an account or, more likely, make a zero day egg account from a throw-away email address. It costs surprisingly little to buy a fake Twitter account. In fact I would wager this whole exercise is a cynical attempt to get Twitter into the news again. So bravo, Slashdot. As for reporting functionality there just isn't the manpower, on twitter or on government payrolls, to filter from the mass of hurt feelings the few actually actionable reports. The most this can accomplish is a slight chance to catch the very stupidest/youngest harassers and/or build a case against them after they're caught by other means.

  3. Link to full research blog post by vbisbest · · Score: 1 · on The Underground Economy of Social Networks

    Link to full research blog post: http://www.barracudalabs.com/wordpress/index.php/2012/08/03/the-twitter-underground-economy-a-blooming-business/

  4. We reported this last year; Barracuda missed much. by Animats · · Score: 5, Informative · on The Underground Economy of Social Networks

    Our paper from November 2011, "Social is bad for search, and search is bad for social", covered this last year.

    Barracuda Networks doesn't even seem to have published a paper. (The article linked in the Slashdot article is a scraper site for press releases.) The Barracuda press release points to an "infographic" and a blog posting which, as their only outside source, links to a black hat site.

    Barracuda doesn't seem to have discovered the extent of the social spamming ecosystem. We identified at least 6 levels:

    • Advertising agencies.
    • SEO firms. ("Google Places Guaranteed")
    • Fake review, "like", "+1", and "retweet" generators. ("Buy Facebook Fans with us today and watch your popularity boom.")
    • Fake account generators, both automated and outsourced to low-wage countries. ("Bulk Accounts is the largest mass account generator out there. ...Gmail, Myspace, Youtube, Facebook, Twitter, Hotmail and much more...")
    • Fake IP address proxies and fake phone numbers ("Premium Private Proxies", "Top Quality CL Phone Numbers used to create Craigslist PVAs")
    • Botnet operators providing proxies on compromised machines. Now we're down at the organized crime level.

    This structure insulates the legitimate businesses who use ad agencies from the criminal activity at the bottom. Except for the botnet operators, everybody in that ecosystem has some kind of web presence, although towards the bottom, they usually have only Skype and Gmail accounts as contacts. I'm not going to link to them here, but our paper gives actual names.

  5. We reported this last year; Barracuda missed much. by Animats · · Score: 5, Informative · on The Underground Economy of Social Networks

    Our paper from November 2011, "Social is bad for search, and search is bad for social", covered this last year.

    Barracuda Networks doesn't even seem to have published a paper. (The article linked in the Slashdot article is a scraper site for press releases.) The Barracuda press release points to an "infographic" and a blog posting which, as their only outside source, links to a black hat site.

    Barracuda doesn't seem to have discovered the extent of the social spamming ecosystem. We identified at least 6 levels:

    • Advertising agencies.
    • SEO firms. ("Google Places Guaranteed")
    • Fake review, "like", "+1", and "retweet" generators. ("Buy Facebook Fans with us today and watch your popularity boom.")
    • Fake account generators, both automated and outsourced to low-wage countries. ("Bulk Accounts is the largest mass account generator out there. ...Gmail, Myspace, Youtube, Facebook, Twitter, Hotmail and much more...")
    • Fake IP address proxies and fake phone numbers ("Premium Private Proxies", "Top Quality CL Phone Numbers used to create Craigslist PVAs")
    • Botnet operators providing proxies on compromised machines. Now we're down at the organized crime level.

    This structure insulates the legitimate businesses who use ad agencies from the criminal activity at the bottom. Except for the botnet operators, everybody in that ecosystem has some kind of web presence, although towards the bottom, they usually have only Skype and Gmail accounts as contacts. I'm not going to link to them here, but our paper gives actual names.