Date: 27 August 2007
Click here for printable version
The techniques of seeding changed at the beginning of last week and started using a porn-like hook eg:
I cant believe you talked me into taking these pictures, hehe. I
hope you like em.
hxxp://77.99.89.192/
..
Ok, here is my picture. I loaded it up for you. Don't show anyone
though. Let me know what you think.
hxxp://91.90.235.115/
..
Oh baby, I love what you sent me. Here is some pics to say thanks.
hxxp://193.95.236.19/
and then changed again a few days later to what looked like a web site sign up request:
Welcome Member,
Thank You for Joining Downloader Heaven.
Confirmation Number: 93933579653371
Temorary Login: user9430
Temp Password ID: kq298
For security purposes please login and change the temporary Login
ID and Password.
Click here to enter our secure server: hxxp://67.53.229.169/
Enjoy,
Confirmation Dept.
Downloader Heaven
With a great variety of topic substituted in for hooks as per:
http://www.f-secure.com/weblog/archives/archive-082007.html#00001255
The latest version seems to be using youtube.com as a hook with subjects along the lines of:
ROTFLMAO, who is that your with?
this is too crazy, but she is hot
are you kidding me? lol
Who is that your with? lol
HAHAHAHAHAHA, man your insane!
The message bodies along the lines of:
If your mom sees this she this video of you she is gonna freak. go look at it...
<a href="hxxp://74.67.127.202/">http://www.youtube.com/watch?v=YpgxJEN1PbY</a>
OMG, what are you doing man. This video of you is all over the net. go look at it...
<a href="hxxp://86.121.40.128/">http://www.youtube.com/watch?v=LNOSrA7RlMh</a>
You need to take this offline, it is in everyones email. :-( take a look, lol...
<a href="hxxp://70.130.33.86/">http://www.youtube.com/watch?v=Eor9cWCQ4Jo</a>
I wonder if the next hooks will be more of the social networking sites such as myspace and facebook?
Matthew McGlashan
|