gonzo
06-07-2006, 06:50 AM
I got this from one of the security newsletters I am subscribed to.
Way to go guys keep "pissing in the well" so that eventually no one will go near an adult site.
-------------------------------------------------------------------------
Malicious applications installing trojans and spyware, but masquerading as purportedly useful and popular programs, are spreading rapidly these days. We already wrote about Emcodec (http://www.2-spyware.com/news/post78.html), Stream Video Codec, fake key generators (http://www.2-spyware.com/news/post92.html), etc. This time we want to present you another similar piece of software discovered by anti-spyware experts of Sunbelt Software (http://www.sunbelt-software.com/), one of the leading security software companies.
PornMag Pass, that's how a new parasite is called, is distributed by the same named web site, which offers “full unlimited access to Daily Porn Mag sites”. Its owners claim that the PornMag Pass service is “100% free” to use. All you have to do is to download an application, which is freely available on the web site. As the authors say, you will not receive any spam, dialers, etc. Yeah, right. You will get widely spread spyware instead.
The analysis of PornMag Pass shows that magic “free key to porn” installs the SpywareQuake (http://www.2-spyware.com/remove-spywarequake.html) trojan and malicious Internet Explorer toolbar. After a while, the compromised system may end up loaded with different parasites - from browser hijackers to dangerous information stealing trojans.
Although such results look quite obvious, there is one strange thing. The parasite and its web site differ from typical adult services. There are no annoying pop-ups, commercial advertisements or numerous suspicious links! The site looks just like a page of legitimate software, not the porn portal. It is designed to look as much reliable as possible. That's why a lot of inexperienced users might trust it. But they better should not. The Internet porn never was a peaceful place, especially so-called “free” services.
Free porn? No, thanks
-----------------------------------
whois information for the cocksucker
[whois.estdomains.com]Registration Service Provided By: ESTDOMAINSContact: +1.3027224217Website: http://www.estdomains.comDomain Name: PORNMAGPASS.COM Registrant: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Creation Date: 27-Mar-2006 Expiration Date: 27-Mar-2007Domain servers in listed order: ns2.pornmagpass.com ns1.pornmagpass.comAdministrative Contact: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Technical Contact: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Billing Contact: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Status:ACTIVE
------------------------------------------------------------------------
Way to go guys keep "pissing in the well" so that eventually no one will go near an adult site.
-------------------------------------------------------------------------
Malicious applications installing trojans and spyware, but masquerading as purportedly useful and popular programs, are spreading rapidly these days. We already wrote about Emcodec (http://www.2-spyware.com/news/post78.html), Stream Video Codec, fake key generators (http://www.2-spyware.com/news/post92.html), etc. This time we want to present you another similar piece of software discovered by anti-spyware experts of Sunbelt Software (http://www.sunbelt-software.com/), one of the leading security software companies.
PornMag Pass, that's how a new parasite is called, is distributed by the same named web site, which offers “full unlimited access to Daily Porn Mag sites”. Its owners claim that the PornMag Pass service is “100% free” to use. All you have to do is to download an application, which is freely available on the web site. As the authors say, you will not receive any spam, dialers, etc. Yeah, right. You will get widely spread spyware instead.
The analysis of PornMag Pass shows that magic “free key to porn” installs the SpywareQuake (http://www.2-spyware.com/remove-spywarequake.html) trojan and malicious Internet Explorer toolbar. After a while, the compromised system may end up loaded with different parasites - from browser hijackers to dangerous information stealing trojans.
Although such results look quite obvious, there is one strange thing. The parasite and its web site differ from typical adult services. There are no annoying pop-ups, commercial advertisements or numerous suspicious links! The site looks just like a page of legitimate software, not the porn portal. It is designed to look as much reliable as possible. That's why a lot of inexperienced users might trust it. But they better should not. The Internet porn never was a peaceful place, especially so-called “free” services.
Free porn? No, thanks
-----------------------------------
whois information for the cocksucker
[whois.estdomains.com]Registration Service Provided By: ESTDOMAINSContact: +1.3027224217Website: http://www.estdomains.comDomain Name: PORNMAGPASS.COM Registrant: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Creation Date: 27-Mar-2006 Expiration Date: 27-Mar-2007Domain servers in listed order: ns2.pornmagpass.com ns1.pornmagpass.comAdministrative Contact: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Technical Contact: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Billing Contact: - Alexander Persen (support@pornmagpass.com) 24 r. des Legionnaires Luxembourg ,L- 1926 LU Tel. +352.26190161Status:ACTIVE
------------------------------------------------------------------------