Avast WEBforum

Other => General Topics => Topic started by: FreewheelinFrank on January 12, 2008, 10:49:17 AM

Title: Barbara Moratek, Ivete Foundation: SCAM!
Post by: FreewheelinFrank on January 12, 2008, 10:49:17 AM

Quote

There is a new scam going around where small non-profit organizations are being targeted by a “Barbara Moratek” of the “Ivete Foundation“.

http://sunbeltblog.blogspot.com/2008/01/beware-barbara-moratek-of-ivete.html (http://sunbeltblog.blogspot.com/2008/01/beware-barbara-moratek-of-ivete.html)

Also here:

http://blog.washingtonpost.com/securityfix/2008/01/barbara_moratek_is_not_your_fr.html (http://blog.washingtonpost.com/securityfix/2008/01/barbara_moratek_is_not_your_fr.html)

Googling the name leads to links to malware: for example, fake YouTube sites on Digg pushing Trojans:

Quote

Antivirus     Version     Last Update     Result
AhnLab-V3   2008.1.12.10   2008.01.11   -
AntiVir   7.6.0.46   2008.01.11   -
Authentium   4.93.8   2008.01.12   -
Avast   4.7.1098.0   2008.01.11   Win32:Zlob-AHS
AVG   7.5.0.516   2008.01.11   Downloader.Zlob.RN
BitDefender   7.2   2008.01.12   Trojan.Downloader.Zlob.ABGS
CAT-QuickHeal   9.00   2008.01.12   -
ClamAV   0.91.2   2008.01.11   Trojan.Dropper-2529
DrWeb   4.44.0.09170   2008.01.11   Trojan.Popuper.origin

Title: Re: Barbara Moratek, Ivete Foundation: SCAM!
Post by: Lisandro on January 12, 2008, 11:45:14 AM

Quote from: FreewheelinFrank on January 12, 2008, 10:49:17 AM

fake YouTube sites

Frank, is there any possibility of fake files into the official YouTube site?

Title: Re: Barbara Moratek, Ivete Foundation: SCAM!
Post by: FreewheelinFrank on January 12, 2008, 04:55:31 PM

The scam YouTube sites are pretty obvious fake when you look carefully: there's no suggestion that YouTube is infected.

hxxp://www[dot]yuotuhe[dot]com/

hxxp://www[dot]ynotube[dot]com/

(Do not go to these sites: they're serving live malware!)

Title: Re: Barbara Moratek, Ivete Foundation: SCAM!
Post by: Lisandro on January 12, 2008, 07:13:31 PM

Thanks for the info Frank.

Quote from: FreewheelinFrank on January 12, 2008, 04:55:31 PM

(Do not go to these sites: they're serving live malware!)

Well, I hope Alwil team take a look on it and improve detection (if any is missed).

Title: Re: Barbara Moratek, Ivete Foundation: SCAM!
Post by: Marc57 on January 13, 2008, 02:33:36 AM

Yup, Thanks for the info Frank