(The quickest way to register)

Forum

Dear visitor! The webpage is only available in English. We're sorry for the inconvenience.
  1. User picture
    • jpvip on Thu 18 Mar 2010
    • 07:35:49 PM UTC

    Facebook password reset scam

    I recently wrote an article about the Facebook password reset scam, that is distributing malware all around the world.

    More here: http://www.helpmyos.com/latest-computer-news-f43/e...

    Also, McAfee posted an article about it: http://siblog.mcafee.com/consumer/consumer-threat-...

    This is an advisory to be watchful for the email.

    ~DragonMaster Jay - Malware Analyst - admin of Advanced Malware Analysts. http://www.helpmyos.com

Comments:

  2. User picture
    • g7w on Thu 18 Mar 2010
    • 08:36:55 PM UTC

    re: Facebook password reset scam

    Nice post.

    Your article lists two references

    1. domain name: cloud.me
      whois
      IP: 75.101.145.21 - robtex
      PTR: ec2-75-101-145-21.compute-1.amazonaws.com
      mxToolBox reports 0 spam DB listings
    2. IP: 118.130.110.244 (Korea) - robtex
      LISTED IN BLACKLIST!
      cbl.abuseat.org
      bl.nszones.com
      dyn.nszones.com
      list.quorum.to
      all.spamrats.com
      noptr.spamrats.com
      problems.dnsbl.sorbs.net
      safe.dnsbl.sorbs.net
      11 days, threat score 32, suspicious
      Project Honeypot
      b.barracudacentral.org
      dnsbl.sorbs.net
      web.dnsbl.sorbs.net
      korea.services.net

    I will not rate cloud.me until there is proof this domain is spamming or has other malicious intent.
    As for IP: 118.130.110.244 rated

    I'm curious, did you email cloud.me with intent on being a beta tester?
    -------
    WOT Services Ltd. - gives us safety through Web of Trust.
    WOT Community - gives us security through unity.
    Thank you all
    - G7W
    • User picture
      • jpvip on Thu 18 Mar 2010
      • 09:58:27 PM UTC

      Nah

      No. I did not try for beta testing.

      I figured it would help to supply the IP since this scam is everywhere right now.

      ~DragonMaster Jay - Malware Analyst - admin of Advanced Malware Analysts.