Categorized | GFI Software

.tk URLs offering surveys, installs and fake Tsunami footage

Someone is really having fun cutting and pasting these around the internet. More fake Japan videos using the familiar imitation Youtube page:
Click to Enlarge
There are many sites popping these right now, all of which offer “Age verification” via filling in surveys, installing software or trying out profile changers, ringtones and other content depending on what list of links are being served by the verification box when you hit them.

I particularly like the IQ test which involves sending them your mobile number and paying $ 10 a month to sign up to who knows what.


Click to Enlarge

URLs to avoid:

awoob(dot)tk

bwoob(dot)tk
cwoob(dot)tk
dwoob(dot)tk
ewoob(dot)tk
gwoob(dot)tk
hwoob(dot)tk
iwoob(dot)tk
jwoob(dot)tk

Christopher Boyd (Thanks to Wendy for additional research).

Related Posts
  • Phishing Attack Offering Fake Premier League Tickets
    After executing a variety of notorious activities targeting the FIFA World Cup, spammers have shifted their focus slightly to target another popular soccer/football topic. Symantec has observed a spam...
  • Malicious Spam on the increase again
    Malware distribution via email is far from dead.  While we had a distinctly quiet period from October 2010 to March 2011, our stats show the bot herders are gearing up again with the proportion o...
  • The Royal Wedding and The Fake Antivirus
    The Royal Wedding of Prince William and Catherine Middleton that will be held tomorrow, on April 29, will attract the attention of many people around the world, and has become a trending topic on vari...
  • Fake AV for mobile platform
    We have seen countless number of rogue security products for Windows platform however this one is targeted to trick mobile users.The sample masquerades itself as a certain AV for mobile and ...
  • Hundreds of College and Government websites still redirecting to fake stores
    In January, I talked about high-profile websites, which had been hacked to redirect users to fake online stores. One unique aspect of the hack was the fact that the attackers had set up additional web...
  • Fake Certificate in Malware – with Message
    The malware authors every now and then send us virus researchers some messages. For example in the compiled binary itself, or as debug output. Now we found a Zbot Trojan variant which tries to evade d...
  • Fake AV served up by phony NACHA emails
    A little while ago, phishing mails claiming to be from NACHA were in circulation - it seems the phishers have had enough of that, deciding to send out malicious files instead. The mail claims an att...
  • Fake AV vs. Zscaler
    I've been monitoring Blackhat spam SEO for more than a year now. I frequently have to modify the scripts used to retrieve the fake AV pages in order to deal with obfuscation and other obstacles t...
  • LizaMoon mass injection hits over 28000 URLs including iTunes
    Websense Security Labs and the Websense Threatseeker Network have identified a new malicious mass-injection campaign that we call LizaMoon. Websense customers are protected with the Advanced Classific...
  • Randomization of code and binaries used by a fake antivirus website
    Last week, I talked about heavy obfuscation being used by attackers to hide their HTML source code from detection. This time we came across an interesting fake antivirus website, which not only contin...

Comments are closed.

Security Status

Beware Facebook "Timeline" scams http://t.co/W5EW0cVv
4 months ago
Nigerian government (unknowingly) hosts phishing website http://t.co/uQd42ENw
4 months ago
PCMag Awards McAfee All Access its Editors’ Choice: SANTA CLARA, Calif.--(BUSINESS WIRE)--McAfee today announced... http://t.co/FakV7Vd8
4 months ago
RT @mikko: I hadn't noticed Google Maps has added 3D models of buildings. Here's a (very accurate) view of F-Secure HQ in Helsinki http://t.co/IKfAZlak
4 months ago
North Koreans aren't known for their online presence. But others may be lured into clicking Kim Jong-Il 'videos' too http://t.co/yQOon6YT
4 months ago
How to Protect Your Professional Reputation on Facebook Timeline http://t.co/I4bcR2VN
4 months ago
This is pretty impressive from @Softpedia: Facebook scans 2 trillion link clicks and blocks 220 million posts each day http://t.co/vKsn9gNl
4 months ago
Need for integrated approach to security in industrial control systems - http://t.co/tPBCNOow with @PikeResearch
4 months ago
Some free-based music we play at work http://t.co/xu5agZfc
4 months ago
Japan’s cyber defense weapon: a virus. It includes quotes by @Luis_Corrons via @InfosecurityMag
4 months ago