Slashdot Mirror

← Back to Domains

Domain: spamforum.biz

Stories and comments across the archive that link to spamforum.biz.

Comments · 10

  1. Spam forums lying low today by Animats · · Score: 3, Informative · on Interview with a Botmaster

    The usual places where you rent botnets, Specialham and Spamforum are down today. When the heat is on, they tend to go offline, but come back in days or weeks.

  2. The usual suspects are still up. by Animats · · Score: 3, Interesting · on China Signs Anti-Spam Pact
    The notorious Black Box Hosting ("Our offshore bullet proof web hosting plans allow bulk email hosting, spam friendly web hosting and bulletproof host.") is still up. They claim to be in "some province in the highlands of China", and their netblock (219.148.32.234) comes up as "CHINANET HEBEI PROVINCE NETWORK".

    There's no indication on the spammer forums of any fears about China-based hosting yet.

    So, thus far, any crackdown is vaporware.

  3. Rent botnets here! $0.05/machine by Animats · · Score: 4, Informative · on CA Warns Of Massive Botnet Attack
    You, too, can rent your own botnet. Just visit one of these spammer-run sites.

    SpamForum

    SpecialHam

    And the new WildBiz.

    WildBiz does not require registration; the other two do. Just enter the forums and look under "Proxy Lists". Typical ads:

    • "Hello everybody here...
      First of all Hi to all of my seniorshooters here..
      Having good collection of fresh Proxies and got DM ["Dark Mailer" .. ed] Latest Version (Full Version) at really cheap rate.
      DM Latest version (Full) for $49
      Fresh Proxies $50 for 500 proxies
      dmandproxies@iamdns.com
    • Today's Fresh Proxies
      61.246.226.69:3128@TUNNEL$GOOD$20297$Australia
      81.33.4.70:3128@TUNNEL$GOOD$2953$Spain
      61.246.226.69:3128@TUNNEL$GOOD$20297$Australia
      218.208.247.81:3128@TUNNEL$GOOD$15219$Malaysia
      219.144.194.74:1080@SOCKS4$GOOD$1125$China
      66.154.54.215:80@TUNNEL$GOOD$4157$United States
      66.154.54.224:80@TUNNEL$GOOD$1266$United States
      ...
      We provide Hourly Updated Fresh Proxy Lists, which can be used for bulk mailing ... standard port proxies and non-standard port proxies are both provided, become our members, and download fresh proxy lists hourly. USD 50 per month, then you can access our proxies database . proxies updated from every 15 minutes to 30 minutes . For more infomation, please contact proxylists@iamdns.com

    That's how you market a botnet.

    Yes, these operations are addressed to wannabe spammers. But the fact that they're advertised openly indicates how weak enforcement is.

  4. Rent zombies online! by Animats · · Score: 5, Informative · on Over a Million Zombie PCs
    They're down today, but SpamForum.biz carries ads for zombies, open proxies, botnets, etc. Numbers available range from 1000 to 50,000.

    When they're up, they're very entertaining.

    An older spammer forum, SpecialHam.com is back up. With banner ads, even. "DarkMailer - not for newbies". "Blackbox Hosting - bulletproof hosting options" "SendSafe - bulk mail has never been this easy". "Bulkhost.com - the leader in bulk-friendly e-mail hosting".

    Sites like these are where the hackers and spammers meet, find deals, and scream about being ripped off by each other. The actual deals tend to take place on ICQ.

  5. Banner ad for Chinese ISP on spamforum.biz by Animats · · Score: 1 · on China and its Relation With Spam
    There's now a banner ad for cheap bulletproof hosting on spamforum.biz.
    • "Our servers are all China-based to ensure no problems arise from complaints generated by email you send. We do not allow: Scam or Anti-Chinese Government sites.

      Most "bulletproof" hosts are made to jump between connectivity providers and countries very frequently to avoid being shut down. In comparison, we are allowed by our upstream to operate freely and openly. This makes our operation simple and reliable.

      Our ISP allows us and our customers to send bulk email. They will never shut us down due to complaints. Most other so-called "bulletproof" hosting providers cannot guarantee this.

    However, they're really a US company run by a known spammer in Ann Arbor, MI. Microsoft is suing them.

  6. Followed by virus-through-firewall applications by Animats · · Score: 2, Insightful · on P2P Through Firewalls
    If P2P through firewalls is deployed, viruses through firewalls can't be far behind.

    0wn corporate networks! Laugh at their ineffective firewalls. Use them to send spam all night! Resell them on Spamforum.biz. At last, the killer app for "grid computing".

  7. Won't work. Zombies will generate the stamps by Animats · · Score: 2, Interesting · on Beat Spam Using Hashcash
    Spammers will just offload stamp generation work onto their zombies. 0wned PCs on cable modems will burn even more CPU time.

    If you want a virus built to generate stamps on zombies, just go over to Spamforum.biz and advertise for one. New ads over there this week include "PushMail Webmailer v1.0.2 ~ New, Fast WAP Webmailer for Sale (Gets by Filters)". There's even a banner ad for a firm that wants spammers: "3 different sites - Pharma - OEM - Cigarettes".

  8. Money laundering services by Animats · · Score: 5, Informative · on DDoS Extortion Attempts On the Rise
    Extortion scams like that require a money laundering service to process the payments. e-Gold is apparently popular.

    Another is WebMoney, mentioned on the spammer board SpamForum.biz. It's a anonymous money transfer service in Moscow. Elaborate crypto. Special downloaded applications. Schemes for transferring money between customers, and finally out into the banking system. Accounts can be in euros, dollars, rubles, or hryvnias. Address is supposedly 71 Sadovnicheskaya Street, Moscow, Russia, 115035. Same address as the "Three Monkeys", which is a gay nightclub.

    There are a number of services like this. They come and go. There's Gold-Cash, in Latvia. There's EvoCash, at an undisclosed "offshore" location. (Well, there was EvoCash; they ceased operations on October 19th.) They even have a trade association, which rates services as "Platinum", "Gold", "Silver", "Copper", "Carbon", or "Chlorine", which gives a hint of the problems in this area.

    Then there are brokers who transfer money between these services. These can be used to perform the "rinse cycle" in money laundering. But that's another story.

  9. When law enforcement does nothing, why bother? by Animats · · Score: 3, Interesting · on FTC Recommends Bounty on Spammers
    It's not that hard to find spammers. Except for the clueless guy the FTC had in charge of the project. The one who, after a year, realized they should try to follow the money. Isn't that covered in Introduction to Law Enforcement 101?

    There's a whole spammer infrastructure, a constellation of crooked companies that make profitable spamming possible. They're not hard to find. Most of them are committing felonies. So why aren't we hearing about arrests once a week or so, instead of once a year? Most of the players are actually in the US or Canada, even though they may seem to be offshore.

    Just as an exercise, I looked at the last spam I received. It was a porno spam, linking to a web site in China. But on the payment page, the form submission was to a server in Canada, connected to Bellnexxia. That's fairly common. Often, spammers don't want to process the payments through the anonymous crooked ISP that serves the data.

    What's really needed is to apply pressure to the banking system to shut down the "high risk third party billing" operations upon which spammers rely for credit card processing. A few money laundering cases would clear up that issue.

  10. Visit a spammer message board - see the felonies by Animats · · Score: 5, Informative · on Spam Turns 100, By One Reckoning
    For a good time, visit this spammer bulletin board. "Make Big Money with Spam". There's enough criminal activity described there to put some people in Club Fed for many years. This is a window into organized crime. Some excerpts:
    • 07-07-2004, 05:25 PM
      Nugster is Offline:
      Junior Member
      Join Date: Jul 2004
      Reliable Proxie service hourly updated

      Hello, I am providing a very good proxie service with hourly updates.

      each members list contains 1,000-2,000 working proxies at all times.

      all you do is load the list into your mailer llike DM mailer uses links to get proxies set it to hourly updates and wala hands free mailing.

      we offer the service for a weekly price of $600 with discount for montly memberships which monthly is $2,200 a $200 savings.

      ...

      We are here to stay & aim to please. Our service is staffed by a full time crew of 10 people who are constantly maintaing our lists by hand 24/7 to ensure working proxies, unlike others who have there lists checked by computers only not acutally checking for smtp enable. ...

    Need money laundering services?

    • adamrich is Offline:
      Junior Member
      Join Date: Apr 2004
      Posts: 11
      processing Quote: Originally Posted by excelbru

      Can someone advise me a reliable bulk proof credit card processor not shutting me down after the first complaints?
      ...
      We can do such processing for you. Take a look at our site www.oxbill.com

    And much, much more.

    If you deal with spam, it's worth some time spent visiting that site. There's a whole criminal infrastructure to support spamming. You'll find "bullet proof web hosting", domain laundering, credit card laundering, virus/worm distributors selling access to zombie machines, mortgage lead buyers, and "pharmacy" operators.

    Yes, it's been reported to CERT/Homeland Security and NANAE.