Monthly Archives: August 2015

What the Facebook Phishing spam messages do..

If you are a Facebook user you have probably seen one of these appear on someone’s time line. In this case they link yuo to http://goo.gl/dKsbKb which then, in this instance, sends you onto: Which then sends you on to: … Continue reading

Posted in Uncategorized | 1 Comment

“secure-code-zrb98dkekld.xyz” “0800 802 1145” scam

By the time I reached this scam the original advert page had been taken down but here is some of the text it used to contain: Support Home Technical Support 0800 802 1145 Security Help Page PROBLEMS: Popup ads are … Continue reading

Posted in Uncategorized | Leave a comment

This is unbeWiivable! “onlineresolve.com” Scam tech support.. on a Wii-U

The other evening we were at a friend’s house and the friend tried streaming a show to his TV using the Wii-U he had connected to the TV. What made me laugh and take photographs was a scam advert that … Continue reading

Posted in Uncategorized | 16 Comments

Reverse engineering (documenting) the TelGuard IVR admin menu.

One of my sites has a TelGuard managed gate system. One thing that is very frustrating is having to call TelGuard to make all changes, even simple ones like what number the gate calls. TelGuard seem to be one of … Continue reading

Posted in Uncategorized | Leave a comment

The “notice-alerted-onlineweb11.com” techvedic / Easy Techy support scam.

When trying to fathom out a recent spate of DNS changes on people’s computers I came across this advert appearing (among other bits of crap). The URL for the current spam advert is http://notice-alerted-onlineweb11.com/UnitedKingdom/notice/alerts/a/index.php?t=http&bid=0.008&geo=GB And the content on the page … Continue reading

Posted in Uncategorized | Leave a comment

The mystery of “82.163.143.172” and “82.163.142.174”

Update: These same people are also using “82.163.143.171”, “82.163.142.173”, “82.163.143.173”, “82.163.142.5” and “95.211.158.132” and another host name of “m75.dnsqa.me”. See the bottom of the article for the new Javascript they use. Note that they now hide the settings under the … Continue reading

Posted in Uncategorized | 37 Comments

“OUR REF : TIM:3003” virus e-mail with ace (zip-like) attachment

Another new work week and another set of virus e-mails. This time to a small subset of the addresses compared to normal. From: Abdul Aziz <Abdul.Aziz@innovate-indonesia.com> Subject: OUR REF : TIM:3003 Attachment: document2015-pdf.ace OUR REF : TIM:3003 Dear Sir, Fyi…….. This Email is … Continue reading

Posted in Uncategorized | Leave a comment

Twitter leaks friends and family information.

I don’t use twitter. This evening someone (who’s IP seems to be in Morocco) signed up for a stupidly named twitter account (i.e. unlikely to be an accidental sign up) using my email address. I got the “Please verify your … Continue reading

Posted in Uncategorized | 4 Comments

“Premium Charging MI Package for Merchant 17143013” docm virus spam.

Another new week and at least two new bits of junk through in e-mail this morning. The most interesting of which is this one which I think is similar to the previous spam runs I’ve seen. From: GEMS@Worldpay.com Subject: Premium Charging MI … Continue reading

Posted in Uncategorized | Leave a comment

TalkTalk Western Union / moneygram scammers re-appear

A few months later and another scam I’ve come across before re-appears. Here are the phone numbers I’ve seen. 02032868447 (this number is answered supposedly as “TalkTalk”) and 02032872850 At one point they called me back with caller ID “0012096913277” … Continue reading

Posted in Uncategorized | 1 Comment