<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="wordpress/2.3.2" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>

<channel>
	<title>PC-Armor Computer Security News Blog &#187; Spam</title>
	<link>http://www.pc-armor.com/blog</link>
	<description>Computer Security News for Everyday Computer Users</description>
	<pubDate>Sun, 22 Jun 2008 06:21:41 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.2</generator>
	<language>en</language>
			<item>
		<title>&#8220;Firewall Update Notification&#8221;</title>
		<link>http://www.pc-armor.com/blog/?p=90</link>
		<comments>http://www.pc-armor.com/blog/?p=90#comments</comments>
		<pubDate>Sun, 13 May 2007 17:28:14 +0000</pubDate>
		<dc:creator>blog</dc:creator>
		
		<category><![CDATA[Information]]></category>

		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.pc-armor.com/blog/?p=90</guid>
		<description><![CDATA[I just received a fraudulent e-mail from overseas today with the subject of &#8220;Firewall Update Notification.”  As you will see, the social engineering techniques used in this e-mail make it appear sincere and legitimate; which is how these online con artists write their messages to entice victims into their deadly webs.  The body [...]]]></description>
			<content:encoded><![CDATA[<p>I just received a fraudulent e-mail from overseas today with the subject of &#8220;<strong>Firewall Update Notification</strong>.”  As you will see, the social engineering techniques used in this e-mail make it appear sincere and legitimate; which is how these online con artists write their messages to entice victims into their deadly webs.  The body of the e-mail <em>(with all the links changed for your protection)</em> reads as follows:</p>
<p><em>Firewall Gold Message Center: You may need to update your Firewall security settings as soon as possible:</em></p>
<p><em>Press here to update your Firewall security settings or read below for more information: http://Fraudulent website</em></p>
<p><em>There is a high possibility that your PC&#8217;s Firewall security settings may become exploited by malicious websites without your knowledge. This could easily lead to the following attacks on your PC&#8217;s hard drive:</em></p>
<p><em>- Unwanted Virus Downloads<br />
- Uncontrollable Trojan horse attacks<br />
- The running of unwanted script programs<br />
- The installation of malicious spyware</em></p>
<p><em>If your PC is not protected correctly then these attacks could allow hackers to track your movements across the Internet. It also means that your information, ranging from passwords to credit card numbers, can be stored by sites that you visit. A successful hacker could examine this information and extract it, setting the stage for identity theft, credit card fraud, or worse.</em></p>
<p><em>Press here for more information on how to make certain you are protected: http://</em><em>Fraudulent website</em></p>
<p><em>Some unknown or untrusted websites use script programs to change your home page, modify your web history, display advertisements, disable your back button, or redirect you to different websites without your consent. Such scripts have also been recently used by Russian hackers to silently install viruses on end-user&#8217;s computers.</em></p>
<p><em>One way to protect your PC is to download this new FIREWALL software program.</em></p>
<p><em>Press here to run the Firewall system scan now:<br />
http://</em><em>Fraudulent website</em></p>
<p><em>If you feel that you are receiving this email in error or are not interested in receiving future &#8220;FIREWALLGOLD&#8221; offers please go to this page: http://</em><em>Fraudulent website</em><em> or contact us via regular mail at:</em></p>
<p><em>Firewall Gold Promotions<br />
100 E. San Marcos Blvd<br />
San Marcos, CA 92069</em></p>
<p><em>Please refer all questions, opinions or additional feedback to promediaadvertising@gmail.com<br />
or write to:</em></p>
<p><em>ProMedia Advertising<br />
7282 55th Avenue  E<br />
Bradenton, FL 34203</em></p>
<p><em>To remove your email from our database or unsubscribe<br />
http://</em><em>Fraudulent website</em></p>
<p>I did a <strong>DSN lookup</strong> for the originating IP Address of this e-mail and the search returned the following information:</p>
<p>IP address:                             60.49.99.198<br />
Reverse DNS:                         tm.net.my.<br />
Reverse DNS authenticity:        [Could be forged: hostname tm.net.my. does not exist]<br />
ASN:                                      4788<br />
ASN Name:                             TMNET-AS-AP (TM Net, Internet Service Provider)<br />
IP range connectivity:               2<br />
Registrar (per ASN):                APNIC<br />
Country (per IP registrar):        MY [Malaysia]<br />
Country Currency:                   MYR [Malaysia Ringgits]<br />
Country IP Range:                   60.48.0.0 to 60.51.255.255<br />
Country fraud profile:               High<br />
City (per outside source):         Batu Pahat, Johor<br />
Country (per outside source):   MY [Malaysia]<br />
Private (internal) IP?                 No<br />
IP address registrar:                whois.apnic.net<br />
Known Proxy?                         No</p>
<p>As you can see in the body of the e-mail, the contact information shows <strong>California</strong> and <strong>Florida</strong> addresses; however, <strong>this e-mail comes from Malaysia</strong>.  The DNS search results also indicate that <u><strong>this IP Address could be forged, since the &#8220;tm.net.my&#8221; domain does not exist</strong></u>.  There were numerous links throughout the e-mail that were likely malicious and could have downloaded backdoor <strong>Trojans, keyloggers, Rootkits,</strong> or other harmful code to your computer.  In fact, the attacks they were warning about are probably the same attacks that would have occurred when someone clicked the links&#8230;imagine that!</p>
<p>If you do not know how to find this information, our eBook &#8220;<strong>Home Network Security</strong>&#8221; will guide you through the steps that were used to discover this information.  Download your copy from our products page today at <a title="Home Network Security eBook Download page" target="_blank" href="http://www.pc-armor.com/products.asp">http://www.pc-armor.com/products.asp</a> and learn how to discover fraudulent e-mails <u><strong>BEFORE</strong></u> opening them and infecting your computer.</p>
<p>Finally, the DNS search results gave me a range of IP address for Malaysia and since I never receive anything legitimate from Malaysia, I added the <strong>60.48.0.0</strong> to <strong>60.51.255.255 Country IP Range</strong> to the list of “<strong>Banned” IP addresses</strong> in my firewall rules; thus, preventing my computer from connecting to any site within that range in the future.</p>
<p>Fraudulent e-mails are increasingly filling up inboxes every day…awareness and knowing how to protect yourself are tools to help you keep your computer safe from intruders.  Our eBook, “<a title="PC-Armor Products Page" target="_blank" href="http://www.pc-armor.com/products.asp"><strong>Home Network Security</strong></a>” will show you many settings to change in Windows 2000/XP and offer numerous techniques to avoid becoming a victim.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.pc-armor.com/blog/?feed=rss2&amp;p=90</wfw:commentRss>
		</item>
		<item>
		<title>Tired of Spam filling your Inbox?</title>
		<link>http://www.pc-armor.com/blog/?p=40</link>
		<comments>http://www.pc-armor.com/blog/?p=40#comments</comments>
		<pubDate>Sat, 17 Feb 2007 00:36:06 +0000</pubDate>
		<dc:creator>blog</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.pc-armor.com/blog/?p=40</guid>
		<description><![CDATA[Depending on the source, anywhere from 60% to 90% of all e-mail these days is unsolicited spam.  Many of these message have malicious code embedded deep within the images of the e-mail and can be considered dangerous.
There is new technology to help you combat spam and one of them is Spam Arrest.  This is a [...]]]></description>
			<content:encoded><![CDATA[<p>Depending on the source, anywhere from 60% to 90% of all e-mail these days is unsolicited spam.  Many of these message have malicious code embedded deep within the images of the e-mail and can be considered dangerous.</p>
<p>There is new technology to help you combat spam and one of them is <strong>Spam Arrest</strong>.  This is a very affordable subscription service that allows you to define who you wish to receive e-mail from; but also allows you to verify that legitimate email did not accidentally get deleted.</p>
<p>It is very user friendly and you can download a free trial from their website at:</p>
<p><a href="http://www.spamarrest.com/">http://www.spamarrest.com/</a></p>
<p>If you want to cut down on spam, check out their tutorial and see just how easy and affordable this service is.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.pc-armor.com/blog/?feed=rss2&amp;p=40</wfw:commentRss>
		</item>
		<item>
		<title>Another New Spam E-mail is Making the Rounds</title>
		<link>http://www.pc-armor.com/blog/?p=34</link>
		<comments>http://www.pc-armor.com/blog/?p=34#comments</comments>
		<pubDate>Fri, 09 Feb 2007 01:14:46 +0000</pubDate>
		<dc:creator>blog</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://www.pc-armor.com/blog/?p=34</guid>
		<description><![CDATA[I had three spam e-mails in my “Inbox” today and each one of them had a subject of  “Re: info (number)”, where the numbers are random.  For example, one subject was “Re: info 604”; another was “Re: info 48&#8220;; and the other was “Re: info 719”
The body of all three e-mails was exactly the same, [...]]]></description>
			<content:encoded><![CDATA[<p><font face="Times New Roman" size="3">I had three spam e-mails in my “Inbox” today and each one of them had a subject of  “<strong>Re: info <em>(number)</em></strong>”, where the numbers are random.  For example, one subject was “<strong>Re: info 604</strong>”; another was “<strong>Re: info 48</strong>&#8220;; and the other was “<strong>Re: info 719</strong>”</font></p>
<p><font face="Times New Roman" size="3">The body of all three e-mails was exactly the same, which was:</font></p>
<p><font size="3"><font face="Times New Roman"><strong>Hi,<br />
</strong></font></font></p>
<p><font size="3"><font face="Times New Roman"><strong>Vizagra  1,80<br />
</strong></font></font><font size="3"><font face="Times New Roman"><strong>Cizalis  3,00<br />
</strong></font></font><font size="3"><font face="Times New Roman"><strong>Lezvitra 3,35<br />
</strong></font></font></p>
<p><font size="3"><font face="Times New Roman"><strong>http://www.printerym*l.com<br />
</strong></font></font></p>
<p><font face="Times New Roman" size="3"><strong>Warning: Remove &#8220;*&#8221; in the above link</strong></font></p>
<p><font face="Times New Roman" size="3">I checked the origination of the e-mails and they came from Seoul, Korea; Taipei City, Taiwan; and Calcutta, India.</font></p>
<p>Obviously these e-mails are not legitimate and if you find them in your “Inbox”…you’re best bet would be not to open them; instead, simply delete them.</p>
<p>It&#8217;s better to be safe than sorry!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.pc-armor.com/blog/?feed=rss2&amp;p=34</wfw:commentRss>
		</item>
	</channel>
</rss>
