Internet Storm Center
Sign In
Sign Up
Handler on Duty:
Xavier Mertens
Threat Level:
green
Date
Author
Title
FAKE SUPPORT CALL
2012-12-06
Daniel Wesemann
Fake tech support calls - revisited
2012-10-03
Kevin Shortt
Fake Support Calls Reported
FAKE
2024-01-24/a>
Johannes Ullrich
How Bad User Interfaces Make Security Tools Harmful
2022-03-02/a>
Johannes Ullrich
The More Often Something is Repeated, the More True It Becomes: Dealing with Social Media
2022-01-03/a>
Xavier Mertens
McAfee Phishing Campaign with a Nice Fake Scan
2021-08-04/a>
Yee Ching Tok
Pivoting and Hunting for Shenanigans from a Reported Phishing Domain
2020-04-18/a>
Guy Bruneau
Maldoc Falsely Represented as DOCX Invoice Redirecting to Fake Apple Store
2020-02-05/a>
Brad Duncan
Fake browser update pages are "still a thing"
2019-04-07/a>
Guy Bruneau
Fake Office 365 Payment Information Update
2019-04-02/a>
Johannes Ullrich
Fake AV is Back: LaCie Network Drives Used to Spread Malware
2019-03-21/a>
Xavier Mertens
New Wave of Extortion Emails: Central Intelligence Agency Case
2017-07-07/a>
Renato Marinho
DDoS Extortion E-mail: Yet Another Bluff?
2016-05-12/a>
Xavier Mertens
Another Day, Another Wave of Phishing Emails
2015-09-28/a>
Johannes Ullrich
"Transport of London" Malicious E-Mail
2014-02-21/a>
Johannes Ullrich
UPS Malware Spam Using Fake SPF Headers
2013-04-29/a>
Adam Swanger
Report Fake Tech Support Calls submission form reminder
2013-04-16/a>
John Bambenek
Fake Boston Marathon Scams Update
2013-01-03/a>
Manuel Humberto Santander Pelaez
New year and new CA compromised
2012-12-06/a>
Daniel Wesemann
Fake tech support calls - revisited
2012-10-03/a>
Kevin Shortt
Fake Support Calls Reported
2012-06-19/a>
Daniel Wesemann
Vulnerabilityqueerprocessbrittleness
2011-07-25/a>
Bojan Zdrnja
When the FakeAV coder(s) fail
2011-07-21/a>
Daniel Wesemann
Down the FakeAV rabbit hole
2011-05-19/a>
Daniel Wesemann
Fake AV Bingo
2011-05-04/a>
Bojan Zdrnja
More on Google image poisoning
2011-01-18/a>
Daniel Wesemann
Yet another rogue anti-virus
2010-11-11/a>
Daniel Wesemann
Fake AV scams via Skype Chat
2010-02-27/a>
Johannes Ullrich
Search Engine Poisoning: Chile Earthquake
2010-02-15/a>
Johannes Ullrich
Various Olympics Related Dangerous Google Searches
2010-02-08/a>
Adrien de Beaupre
When is a 0day not a 0day? Fake OpenSSh exploit, again.
2010-01-08/a>
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
2009-09-17/a>
Bojan Zdrnja
Why is Rogue/Fake AV so successful?
2009-09-04/a>
Adrien de Beaupre
Fake anti-virus
2009-02-06/a>
Adrien de Beaupre
Fake stimulus payments
2008-09-15/a>
donald smith
Fake antivirus 2009 and search engine results
SUPPORT
2024-06-17/a>
Xavier Mertens
New NetSupport Campaign Delivered Through MSIX Packages
2023-08-18/a>
Xavier Mertens
From a Zalando Phishing to a RAT
2022-10-21/a>
Brad Duncan
sczriptzzbn inject pushes malware for NetSupport RAT
2020-02-05/a>
Brad Duncan
Fake browser update pages are "still a thing"
2015-06-27/a>
Guy Bruneau
Is Windows XP still around in your Network a year after Support Ended?
2014-07-05/a>
Guy Bruneau
Java Support ends for Windows XP
2012-12-06/a>
Daniel Wesemann
Fake tech support calls - revisited
2012-10-03/a>
Kevin Shortt
Fake Support Calls Reported
2011-05-23/a>
Mark Hofman
Microsoft Support Scam (again)
2010-07-06/a>
Rob VandenBrink
Bogus Support Organizations use Live Operators to Install Malware
2010-06-15/a>
Manuel Humberto Santander Pelaez
Microsoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild
2010-03-01/a>
Mark Hofman
Microsoft will drop support for Vista (without any Service Packs) on April 13 and support for XP SP2 ends July 13. (i.e. no more security updates). If you are still running these, it it time to update.
2010-02-03/a>
Rob VandenBrink
Support for Legacy Browsers
CALL
2024-07-08/a>
Xavier Mertens
Kunai: Keep an Eye on your Linux Hosts Activity
2023-04-07/a>
Xavier Mertens
Detecting Suspicious API Usage with YARA Rules
2022-08-26/a>
Xavier Mertens
Paypal Phishing/Coinbase in One Image
2021-03-17/a>
Xavier Mertens
Defenders, Know Your Operating System Like Attackers Do!
2020-10-03/a>
Guy Bruneau
Scanning for SOHO Routers
2018-09-04/a>
Rob VandenBrink
Let's Trade: You Read My Email, I'll Read Your Password!
2013-04-29/a>
Adam Swanger
Report Fake Tech Support Calls submission form reminder
2012-12-06/a>
Daniel Wesemann
Fake tech support calls - revisited
2012-10-03/a>
Kevin Shortt
Fake Support Calls Reported
2012-09-05/a>
Rob VandenBrink
Auditing a Network for VOIP Call Quality Metrics
Homepage
Diaries
Podcasts
Jobs
Data
TCP/UDP Port Activity
Port Trends
SSH/Telnet Scanning Activity
Weblogs
Threat Feeds Activity
Threat Feeds Map
Useful InfoSec Links
Presentations & Papers
Research Papers
API
Tools
DShield Sensor
DNS Looking Glass
Honeypot (RPi/AWS)
InfoSec Glossary
Contact Us
Contact Us
About Us
Handlers
About Us
Slack Channel
Mastodon
Bluesky
X
Have you seen our swag?
Buy SANS ISC Gear