eric feinberg's Album: Russian Business Network Spreading Malware On Facebook

Russian Business Networks Are Creating Fake Facebook Profiles and spreading malicious links on Real NFL Fan Pages This has been going on the two week and these malicious links are occurring with more frequency http://www.icttf.org/albums/view/425 Here is the most recent url query report http://urlquery.net/report.php?id=2337172 ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile 2013-05-05 18:15:28 urlQuery Client 93.170.52.21 2 ET CURRENT_EVENTS HTTP Request to a *.tk domain 2013-05-05 18:15:28 93.170.52.21 urlQuery Client 3 ET RBN Known Russian Business Network IP (434) 2013-05-05 18:15:42 urlQuery Client 93.170.52.21 2 ET CURRENT_EVENTS HTTP Request to a *.tk domain Here is the WikiPedia on the Russian Business Network The Russian Business Network (commonly abbreviated as RBN) is a multi-faceted cybercrime organization, specializing in and in some cases monopolizing personal identity theft for resale. It is the originator of MPack and an alleged operator of the now defunct Storm botnet.[1][2][3] The RBN, which is notorious for its hosting of illegal and dubious businesses, originated as an Internet service provider for child pornography, phishing, spam, and malware distribution physically based in St. Petersburg, Russia. By 2007, it developed partner and affiliate marketing techniques in many countries to provide a method for organized crime to target victims internationally.[4]

Photo 1 of 8 in Russian Business Network Spreading Malware On Facebook

Russian Business Network Spreading Malware On Facebook
Russian Business Networks Are Creating Fake Facebook Profiles and spreading malicious links on Real NFL Fan Pages

This has been going on the two week and these malicious links are occurring with more frequency

http://www.icttf.org/albums/view/425
Here is the most recent url query report http://urlquery.net/report.php?id=2337172

ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile
2013-05-05 18:15:28 urlQuery Client 93.170.52.21 2 ET CURRENT_EVENTS HTTP Request to a *.tk domain
2013-05-05 18:15:28 93.170.52.21 urlQuery Client 3 ET RBN Known Russian Business Network IP (434)
2013-05-05 18:15:42 urlQuery Client 93.170.52.21 2 ET CURRENT_EVENTS HTTP Request to a *.tk domain

Here is the WikiPedia on the Russian Business Network

The Russian Business Network (commonly abbreviated as RBN) is a multi-faceted cybercrime organization, specializing in and in some cases monopolizing personal identity theft for resale. It is the originator of MPack and an alleged operator of the now defunct Storm botnet.[1][2][3]
The RBN, which is notorious for its hosting of illegal and dubious businesses, originated as an Internet service provider for child pornography, phishing, spam, and malware distribution physically based in St. Petersburg, Russia. By 2007, it developed partner and affiliate marketing techniques in many countries to provide a method for organized crime to target victims internationally.[4]