Friday, March 14, 2008

Interactive Brands Targets Consumers

Interactive Brands is targeting the customers of Adobe, Ad Aware, AntiVir, McAfee, MySpace, Norton, Panda, and Spybot Search and Destroy. The malicious typosquatting technique has proven effective in the past. On Friday evening (March 14), CNet 63.243.188 included the following domains (CNet query through robtex.com):

1-866-software.com
2008-downloads.com
3000tvchannels.net
360-share-music.com
360share.cn
360share.net
360sharepro.com
accurate-searches.com
acrobat-pdf-reader.com
acrobat-reader-ib.com
acrobat8download.com
acrobatbundle.com
acrobatdownload-ib.com
acrobatpack.com
acrobatreader-8.com
ad-aware-ib.com
adaware-ib.com
adawarebundle.com
adawarepack.com
adobe-pack.com
adobe-reader-it.com
adobeacrobatpack.com
adobeacrobatreader-8.com
adobepack.com
adobereader-8.com
adobereader-download.com
adobereader-ib.com
adultmoviesmembersarea.com
advanced-people-finder.com
advanced-people-lookup.com
advancedpeoplelookup.com
adwarepro.com
affiliate.mp3downloading.com
affiliate.netmp3downloads.com
all-public-records.com
allcountyrecords.com
ancestorsdatabase.com
anti-virus-free.net
antispyware-2007.com
antispyware007.com
antivir-2007.com
antivir-2008.com
antivir-protection.com
antivir-security.com
antivir-software.com
antivir2007.com
antivirus-2007.com
antivirus-ib.com
antivirus-pack.com
antivirus-panda-suite.com
antivirus2k7.com
antivirus2k8.com
antivirusreview.info
any-court-record.net
anypublicrecords.com
apisvr01.email.upclk.com
apisvr01.logger.upclk.com
apisvr01.messages.upclk.com
arabic-tv-online.com
arabiconlinetv.com
ares-usa.com
aresuk.com
aresunlimited.com
australian-ancestry.com
australian-records.com
australiapeoplerecords.com
avast-bundle.com
avast-pack.com
avastantivirus-pro.com
avastbundle.com
avastpack.com
avforce.com
avg-antivirus-ib.com
azulcancun.com
azureusunlimited.com
background-check-now.net
background-search.us
background-sniffer.com
backgroundsniffer.com
bajaprogramasgratis.com
bankruptcy-record-search.com
bcheck-pkg.com
bck-check.com
bearshare-uk.com
bearshare-usa.com
bearshareunlimited.com
becomeawebguru.com
becomebuisnessman.com
bejoin-devel.cashengines.com
bejoin.cashengines.com
bestedownloads.com
bestmp3review.com
blubsterunlimited.com
bongos.marketengines.com
build-myspace.com
bundlepartner.com
bundlesmembersarea.com
business-record-search.com
cashengines.com
cashslinger.com
ccpayinfo.com
ccpayinfo.net
cemetary-database.com
chat.marketengines.com
click.cashengines.com
click.cybertvpartner.com
click.interactivebrands.com
click.recordspartner.com
click.test.cashengines.com
comparatif-tv.com
criminal-records-now.us
csdetails.com
csib.interactivebrands.com
csmb.marketbill.com
cstool.interactivebrands.com
cstool.marketengines.com
cyber-tv-partner.com
cybertv-ib.com
cybertv-partner.com
cybertv-pkg.com
cybertvpartner.com
daurinaycesar.com
death-files.com
death-record-search.com
designer.cashengines.com
detectiveservices.info
devel_sql.upclick.com
digitaltvonpc.com
diguprecords.com
dldassist.com
dldbil.com
dldcs.com
dldguide.com
dldpay.com
dldprovide.com
dldsubscribe.com
dldsupports.com
doc-to-pdf.net
download--portal.com
download--torrent.com
download-ad-aware.com
download-it-free.com
download-mcafee.com
download-pro-version.com
download-utilities.com
download.mcetools.com
download.mp3downloading.com
download1.marketengines.com
download1.mp3downloading.com
download2.marketengines.com
downloadassist.com
downloadhome.net
downloadhq-2008.com
downloadhq2008.com
downloadinghome.com
downloads-reviews.info
drimagames.com
drmengines.com
dvdsoftwarereview.info
dwnldsupport.com
easy-antivirus.com
easy-office.co.uk
easy-pdf-creator.com
easy-tv-online.com
easycashtutorials.com
easysoftwaredownloads.com
emoneytutorial.com
emoneytutorials.com
epdf-creator.com
error-doctors.com
errormechanic.com
esubscribe.us
exact-searches.com
excellentlogiciel.com
extremedownloadnetwork.com
extremegamesdownload.com
extrememoviedownloads.com
ez-downloading.com
ezdvdclone.com
ezdvdripper.com
filmheadquarters.com
find-any-family.com
find-people.quick.com
find-them-all.com
fixwinmx.com
found-them.com
fr-telechargements.com
france-download.com
france-incredimail.com
free-2008.com
free-antivir.net
free-download-center.com
free-mp3-share.com
free-music-page.com
free-music-page.net
free-satellite-network.com
free-software-access.com
free-spybot.com
freedocumentsearch.com
freedowloads.com
freedownloadpage.com
freemusicpage.net
freesoftdownloadz.com
freesoftwareaccess.com
freetvdirectory.com
ftp2.interactivebrands.com
full-edition.com
full-editions.com
full-license.com
full-licenses.com
genealogytoday.info
get-divx.com
gicsasucks.com
gov-check.com
gov-check.org
gov-check.us
gov-files.com
gov-files.info
gov-files.net
gov-files.org
gov-files.us
government-check.com
government-check.org
government-check.us
government-records.org
governmentcheck.org
governmentcheck.us
hablar-espanol.com
howtostaylegal.com
hq-2008.com
hq-edition.com
hq-editions.com
hqedition.com
hsprovider.com
hsprovider.net
i-dot-music.com
ib-adaware.com
ib-pandaantivirus.com
ib-reviews.com
ib-site-manager.com
ib-softwares.com
ib-tvplayer.com
ibaffiliates.com
ibaffiliates.interactivebrands.com
ibrecordsmembersarea.com
imoviesearch.com
imusicnow.com
infinitemoviedownloads.com
instant-backgroundcheck.com
instant-magick.com
interactivebrands.com
interactivebrands.com
internationaltvnetworks.com
internettvaccess.com
intra.marketengines.com
ip-mymusicbill.com
ip-yourwebdownloads.com
ipdetection.marketengines.com
ipodblaster.com
irfanview-bdl.com
irfanview-ib.com
irfanviewbundle.com
irfanviewpack.com
join-devel.marketengines.com
la-tv-internet.com
last-version.com
latest-antivirus.com
latest-edition.com
latest-editions.com
learn-2-speak.com
legalsoftwarecentre.com
limewire-usa.com
limewireuk.com
liveplayer.tv
logiciel-winzip.com
lookchannels.com
magazines4free.com
mail.adwarepro.com
mail.avforce.com
mail.cashengines.com
mail.cashengines.com
mail.cashslinger.com
mail.cybertvpartner.com
mail.daurinaycesar.com
mail.daurinaycesar.com
mail.defenza.com
mail.fullsoftwaredownloadz.com
mail.hsprovider.com
mail.hsprovider.com
mail.hsprovider.com
mail.hsprovider.net
mail.ib-site-manager.com
mail.ib-softwares.com
mail.ib-softwares.com
mail.interactivebrands.com
mail.marketbill.com
mail.marketengines.at
mail.mp3downloading.com
mail.nadeaussrh.com
mail.netmp3downloads.com
mail.netmusicmania.com
mail.powercompress.com
mail.rackengines.com
mail.recordspartner.com
mail.richwebmedia.com
mail.ultimatetvshow.com
mail.upclick.com
mailer.cashengines.com
maimonide.net
marketbill.com
marketengines.at
marketengines.com
marriage-files.us
marriagefiles.us
marriagerecords-usa.com
maxyouripod.com
mcafee-antivirus-2007.com
mcafee-internetsecurity.com
mcafee-pack.com
mcafee-suite.com
mcafee-suite2007.com
mcafeeantivirus2007.com
mcafeebundle.com
mcafeepack.com
mcafeesuite-2007.com
mcafeesuite2007.com
mcetools.com
media-realplayer.com
megamoviedownloads.com
megamovienetwork.com
memberlog.net
members.cashslinger.com
members.cybertvpartner.com
members.recordspartner.com
membersredirection.marketengines.com
military-records-search.com
monitor-can.marketengines.com
morguedatabase.com
morguerecords.com
moviesupport.net
mp3chk.com
mp3downloading.com
mp3netonline.com
mp3reviewguide.com
mp3support.net
mp4university.com
music-download-central.com
music-download-network.com
musicdownloadreviews.info
musicformembers.com
musicmp3review.com
musiqueillimite.com
my-software-center.com
mybil1.com
mybil2.com
mybil3.com
mybil4.com
mybil5.com
mybil6.com
mybil7.com
mybil8.com
mybil9.com
mycybertv.com
mydefenza.com
mydownloading.com
mydownloadnetwork.com
mydownloadsite.com
mydownloadsite.net
mymp3down.com
mymp3live.com
mymusic-cs.com
mymusicbill.com
mysoftwarecentral.com
mysoftwaredownloads.com
myspace-reactor.com
myspace.cashengines.com
myspacemembersarea.com
myspacereactor.com
myupclick.com
mywebcs.com
myxptools.com
nadeaussrh.com
netacuity01.marketengines.com
netdetectiveservices.info
netmp3downloads.com
netmp3music.com
netmusicmania.com
netspyprotector.com
nettvbroadcasts.com
nettvdirect.com
new.daurinaycesar.com
norton-antivirus2007.com
norton-virus-scan.com
nortonsecurity2007.com
ns.maimonide.net
ns.patrickdanino.com
ns.redactionb13.com
ns1.background-search.us
ns1.hsprovider.com
ns1.hsprovider.net
ns1.ib-site-manager.com
ns1.liveplayer.tv
ns1.maimonide.net
ns1.marriage-files.us
ns1.marriagefiles.us
ns1.nadeaussrh.com
ns1.officialreports.us
ns1.online-fernsehen.tv
ns1.onlineplayer.tv
ns1.patrickdanino.com
ns1.redactionb13.com
ns1.reseaumaimo.com
ns1.search-and-find.us
ns1.tele-enligne.tv
ns1.watchonline.tv
ns2.background-search.us
ns2.hsprovider.com
ns2.hsprovider.net
ns2.ib-site-manager.com
ns2.infoglyphe.com.ns-not-in-service.com
ns2.liveplayer.tv
ns2.maimonide.net
ns2.marriage-files.us
ns2.marriagefiles.us
ns2.nadeaussrh.com
ns2.officialreports.us
ns2.online-fernsehen.tv
ns2.onlineplayer.tv
ns2.patrickdanino.com
ns2.rackengines.com
ns2.search-and-find.us
ns2.tele-enligne.tv
ns2.watchonline.tv
obituary-records.com
oem-license.com
official--software.com
official--softwares.com
official-hq.com
official-installer.com
official-realplayer.com
officialbundles.com
officialinstaller.com
officialreports.us
officialsoftwaredownload.com
online-fernsehen.tv
onlinemoneyinstitute.com
onlineplayer.tv
onlinetv-review.com
onlinetvaccess.com
onlinetvreviews.com
p2p-outlet.com
p2p-vault.com
p2psupport.net
pack-avg.com
panda-2008.com
panda-anti-virus.com
panda-antivirus-2007.com
panda-antivirus-2008.com
panda-antivirus-2008.net
panda-bdl.com
panda-bundle.com
panda-ib.com
panda-suite.com
pandaantivirus-2007.com
pandaantivirus-2008.com
pandaantivirus-ib.com
pandaantivirus2008.com
pandabundle.com
pandasecurity2008.com
pandasecuritysoftware.com
pandasecuritysoftware.net
pandashield.com
pandasuite2007.com
paradox.marketengines.com
paybox01.marketengines.com
paybox01.upbill.com
paybox02.marketengines.com
paybox03.marketengines.com
paybox04.marketengines.com
pbpuserservice.marketengines.com
pc-pitbull.com
pcdefenza.com
pcdefenza.net
pcsecurityreview.com
pctvreview.com
pctvreviews.com
pdf-2008.com
pdf-2009.com
pdf-2k7.com
pdf-2k8.com
pdf-2k9.com
pdf-8.com
pdf-creator-8.com
pdf-files.net
pdf-suite.com
pdf-wizard.com
pdf-writer-reader.com
pdf2k7.com
pdf2k8.com
pdf2k9.com
people-search-database.com
people-tracer.com
powercompress.com
premium-tv-network.com
premiumtvchannels.com
pro-editions.com
pro-protection.com
proeditions.com
property-record-search.com
public-database.com
public-marriage-records.com
puredownloadz.com
pwibill.com
quick-people-finder.com
rackengines.com
rd.marketengines.com
reader-2008.com
reader-8.com
reader-pdf.com
real-bdl.com
real-ib.com
real-media-player.com
realopinions.net
realplayer-10.com
realplayer-music.com
realplayer-suite.com
realplayer2007.com
realplayerbundle.com
realplayerpack.com
recommendedsoftware.net
record-detectives.com
recordsonline.us
recordspartner.com
registrycleantool.com
relatives-finder.com
resilientnetworks.com
revealedidentity.com
richwebmedia.com
safepay1.interactivebrands.com
safepay2.interactivebrands.com
safepay3.interactivebrands.com
safepay4.interactivebrands.com
safesoftwaredownloads.com
satellitetv4pc.com
search-and-find.us
search-for-relatives.com
search-people-records.com
searchfamilymembers.com
searchib.com
searchyourgenealogy.com
secure.cybertvpartner.com
secure.marketengines.com
secure.recordspartner.com
secure2.cybertvpartner.com
secure2.marketengines.com
secure3.cybertvpartner.com
secure3.marketengines.com
secure4.cybertvpartner.com
secure4.marketengines.com
security-review.info
securitybundles.com
securitypacks.com
sexoffender-registry.com
sft.marketengines.com
skypephonepackage.com
smtp.interactivebrands.com
smtp.marketengines.com
smtp.upclick.com
soft-tv.com
software-2008.com
software-torrent.com
softwarehq-2008.com
softwarehq2008.com
spybot-search-n-destroy.com
spyerazer-pkg.com
spyerazer.com
spywaretech.net
sqlgt.marketengines.com
sqlop.marketengines.com
sqlprod.marketengines.com
sqlrep.marketengines.com
ssl-a.upclicksolutions.com
ssl-b.upclicksolutions.com
ssl-c.upclicksolutions.com
ssl-d.upclicksolutions.com
stage.build-myspace.com
stage.myspace-reactor.com
stage.myspacemembersarea.com
stage.myspacereactor.com
tele-enligne.tv
tele-envivo.com
telechargements-fr.com
teleenlinea.com
teleenvivo.com
teleparinternet.com
thecopydvd.com
themusicsmembersarea.com
thenuker.com
thesoftwaremembersarea.com
thetvmembersarea.com
to-pdf.com
tool.daurinaycesar.com
tool.thesoftwaremembersarea.com
tools.build-myspace.com
top-free-downloads.com
top-software-downloads.com
topsoftware-reviews.com
torentopia.org
torenttopia.com
torenttopia.org
torrent-topia.com
torrent-topia.org
torrentfreebie.com
tunovelas.com
tv-4-free.com
tv-4-pc.com
tv-par-internet.com
tv-su-pc.com
tv-sur-pc.com
tvparapc.com
tvsupc.com
tweekspace.com
ultimatemoviedownload.com
ultimatemusicnetwork.com
ultimatesoftwaredownload.com
ultimatesoftwaredownloads.com
ultimatetvshow.com
ultra--downloads.com
ultra-download.com
universal-music-downloads.com
unlimitedgamesdownload.com
unlimitedmovienetwork.com
upbill.com
upclk.com
upclkcorp.com
us-federalrecords.com
usa-lostandfound.com
version-2008.com
version-2k8.com
version-officielle.com
version2008.com
version2k7.com
version2k8.com
virusscan2007.com
virusscan2k7.com
virusscan2k8.com
virusscanxp.com
watch-tv-live.com
watchonline.tv
web-sports-tv.com
web-tv-interactive.com
webmail.upclick.com
website-2008.com
webtvinteractive.com
weprotect-u.com
winmx-uk.com
winmx-usa.com
winzip-10.com
wordtopdf.net
worldtv-online.com
ws1.marketengines.com
wsdmks.marketengines.com
wservices.cashengines.com
wservices.marketengines.com
wsoplogin.cashengines.com
wspaysystem.marketengines.com
wstrack.cashengines.com
www.free-2008.com
xp-secure.com
xtrarevenues.com
youbikini.com
your-tv-online.com
yourwebdownloads.com
yousearchandwefind.com

Block by IP range and by name. The hosts files for Smoothwall 3.0 in the Snort Config Samples Project at emergingthreats.net blackholes these domains.

Dancho Danchev's blog of March 20th also reports on this criminal group:
http://ddanchev.blogspot.com/

James