Holy. I'd never even heard of scenicreflections before. Yikes. As a quick followup, starting last night at approx. 9pm eastern time, both the...
Wow. And today was the first day I'd even heard of the rustoc exploit. Some Russian hacker out there must be losing money. (Or is about to.)...
I posted a link on Digg: http://digg.com/security/iframemoney_An_advertising_affiliate_program_that_endorses_virus_installs To a synopsis I...
Pharmacy Expressorator(TM)! Well here we are: a new year, and apparently a drastically different methodology from the spammers behind Pharmacy...
Just in time for post-xmas spammers: the Prestige Replicator(TM) makes a return! They want our "orders", so I'm just making it that much easier to...
Re: 3 Pharmacy Retaliators: My Canadian, International RX, US Drugs It's a phishing site. So that user sent them fake information. :) I've...
Re: Newest version, again... It's a verification piece I wrote. One affiliate = one product = one site. Had to verify because they change...
Newest version, again... Well they certainly aren't stopping anytime soon are they? They just switch affiliate id's. Today's is "xproject"...
I'm possibly adding more of the same here but my own additions would be as follows: - Don't assume that just because you are not running any...
Re: Newest Version I guess I was not clear: all versions listed are identical. There is no difference between them. I only named them...
Newest Version Latest edition, mirrored: http://www.mytempdir.com/1103967 http://www.mytempdir.com/1103969 http://www.mytempdir.com/1103971...
Hey: do you, or anyone else here, monitor bot traffic? Or IRC communications? Mostly out of curiosity. SiL
Hey: they wanted us to shop even more for the Xmas season. We're just giving them EXACTLY what they asked for. :) Nice work! SiL:thumb:
First: thanx for your kind words. :) I love this stuff. I am well aware that they attempt to counter this and as if I needed proof, today I...
Spur-M-Enator(TM) - New Version! New Spur-M-Enator(TM) Newest version with several modifications. Before downloading and running I would...
I should clarify: One person is responsible for the setup of that particular bot (SpamThru) and that particular setup of dns servers, infections...
A blast from the past. It still works: http://www.mytempdir.com/1097045 Please read the instructions. This is currently only posting to...
I would just like to report back that NoScript DOES indeed work with this utility. Also: I no longer see that mysql_free_result error, which...
No but I am working on one. That's the Discount Pharmacy outfit, another one believed to be related to Leo Kuvayev. You'll notice that they...
Hey there It is precisely this kind of attitude that I have become so sick of hearing. I for one am all for "stooping to their level" if it...
Since that link is so busy, here are a few more: http://www.mytempdir.com/1093721 http://www.mytempdir.com/1093732...
Pardon the circular reference, but the Pharmacy Expressorator(TM) is verified to cost spammers money:...
If you run it, try these (I can't install it where I work. Not allowed.) A filter for: window.onload = f**kup ; (That keeps getting...
Does Proxomitron allow the filtering of specific lines of javascript? :o SiL
In light of the recent upswing in spam for these websites, I decided I should just get the new version out there and see if people use it. This...
Separate names with a comma.
