Comments for ThreatFire Research Blog

Comment on Delpiero Nabbed? by J.R.

J.R. — Sun, 14 Mar 2010 19:21:30 +0000

I am not sure identity theft is considered a “white collar crime,” but I have long said that crimes that violate the public confidence, are far worse than most street crimes. If a mugger steals my wallet, he hurts me, and by extension, my family, but when a guy scams “the system” he hurts millions and worse, destroys the confidence we have in our institutions. Life in prison would not be to harsh a sentence for this type of “sociopath.” The collective “man-days” lost to the people working to repair the damage done to their lives and credit, far exceed the number of “man-days,” these guys would serve in a life sentence.

Comment on Urlzone/Bebloh Unpacking Stub AntiVM/Anti-Emulation by Robbin Corlee

Robbin Corlee — Wed, 10 Mar 2010 11:00:47 +0000

By far the most concise and up to date information I found on this topic. Sure glad that I navigated to your page by accident. I’ll be subscribing to your feed so that I can get the latest updates. Appreciate all the information here

Comment on Tertwit? or Twitter Tweet Links Redirect to Koobface by Roseann Dukette

Roseann Dukette — Wed, 10 Mar 2010 10:16:30 +0000

ohhh awesome info

Comment on Delpiero Nabbed? by Computer Security News Highlights for Tuesday, March 09, 2010 | Spyware Removal Guide

Wed, 10 Mar 2010 00:31:34 +0000

[...] Delpiero Nabbed? from ThreatFire Blog | Tuesday, March 09, 2010 The Bangkok Post’s article on a Malaysian man’s arrest and extradition to the U.S., charged with identity theft, a part of a prosecution begun in 2008, exposes potentially the 12th person known only by his handle “Delpiero”. The man will be extradited for theft and sale of over 40 million credit card numbers and personal information. [...]

Comment on Windows Defender 2010 FakeAv at the Top of this Morning’s List by jacksonville repair computers

jacksonville repair computers — Mon, 08 Mar 2010 08:34:38 +0000

I’m always looking into stuff on information that I do not know about. It is tough to search things that you don’t know of, because what do you search for? Your blog is the type of thing I love to read about regarding something new to me. Great post! Thanks.

Comment on Koobface Continued… by Kevin

Kevin — Sun, 07 Mar 2010 08:13:04 +0000

Why don’t some antivirus and spyware software not see this as a threat? I had to manually find harmful and foreign “files” myself. I’m fairly advanced with computers compared to the average person, but I’m still afraid I’ve missed some harmful “files”. It turns out that I had a lessor version of this virus but it still felt like it was a majour deal for me. (I purposely downloaded the fake flash from the noticeably fake website, to see what kind of malware it was. I thought it would just be some kind of phishing thing but boy was I wrong.) This thing also popped up a window on my computer that had a windows xp provisional logo(I have windows xp home) and it said that my computer would shut down in like,,240 seconds and required a CAPTCHA to exit ( it looked like how the windows defender works on Vista, making the screen darker except for the active window with that captcha)

Comment on Windows Defender 2010 FakeAv at the Top of this Morning’s List by Linda

Linda — Sat, 06 Mar 2010 15:02:02 +0000

Actually, it happened immediately after I looked at a game on Facebook.

Comment on Windows Defender 2010 FakeAv at the Top of this Morning’s List by Linda

Linda — Sat, 06 Mar 2010 15:01:00 +0000

My laptop was invaded and the result was that everytime I try to log on, it goes in a circle and closes. Has anyone else had this problem? Where did it come from?

Comment on Windows Defender 2010 FakeAv at the Top of this Morning’s List by Amber

Amber — Sat, 06 Mar 2010 09:37:23 +0000

I got hit with this last month while browsing deviantART. My mom was able to get rid of it by stopping it from running at startup and doing a System Restore.
If this thing’s coming from Turkey, it might be funding terrorism.

Comment on Michael Jackson X-Files Answer by ThreatFire Blogger

ThreatFire Blogger — Fri, 05 Mar 2010 18:54:20 +0000

Florin – thanks for the interest. Hmmm, are you kidding around perhaps? Either way, we don’t recommend visiting the malicious site that we described in the post. Besides, we believe that Zbot is no longer hosted at the site, it’s been months since we posted that info.