Gorillas

TowPow BulletProof Affiliate TOWPOW is a sub-affiliate of Zed-Cash who recently rebranded. Adv: Login page: News: Stats: Stats by sites: By domains: Charts: Websites landings: Profile: Change password: Change profile: Affiliate invitation: Payements: Crazy huh ? Tickets statut: Open a ticket: Domain statut: 350 domains: Contact us: Additional infos: http://krebsonsecurity.com/2013/01/inside-the-gozi-bulletproof-hosting-facility/ download file now

Trojan Win32 Tobfy M Affiliate Came across a Tobfy sample today, things was interesting so here is a post. I will skip the reversing part: im a bit bored to take 50 screenshots and go step by step about whats do the M version of Tobfy. (this winlock is very primitive and relatively easy to understand) So, lets go directly to the C&C part. French landing when loaded (buggy IP retrieving, and geoloc): � dns: 1 �� ip: 91.226.212.174 - adresse: HKKPOGMPG.POLEXT-FREEHOST.RU � dns: 1 �� ip: 91.226.212.174 - adresse: AREKOV.COM Login: Registration: News: Statistics: Checks: Links/EXE (39090a097cfbe4ab766317e5f3d74b53): Rules: Affiliate stats: (Ignore the admin account, its also made by me) Affiliate Checks: Some samples took from the server: http://www.kernelmode.info/forum/viewtopic.php?f=16&t=2214&start=10#p19581 Im a bit unaware about Tobfy but that the first time i see this one on affiliate system. download file now

ppc su Affiliate Advert: I thought it was related to Beecoin, due to the design (know for FakeAV) According to TrendMicro BeeCoin generated US$123,475 in profit. But after some talk with the Affiliate owner seem ppc.su is clean, anyway here is some screenshots if you want see the inside Login: Stats: Account: Payement: XML Feeds: Contact: Tickets: On the last screen: Partner: Hello, how can i get ID? Admin: Tell me about your traffic, thanks Partner: Traffic comes from search engines results substitution pages Admin: Account had been activated Parter: Thanks Admin: We are welcome to any questions PPC: All links lead to 95.211.193.15/?clid=xxxxxxxxxxxx download  file  now