This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet….
Tag: TSS
XSS to TSS: tech support scam campaign abuses cross-site scripting vulnerability
855-472-1840855-472-1844855-626-2563855-805-1138855-805-1278855-805-1285855-827-2595855-827-3045855-885-0784855-885-0818 855-885-0830855-885-0833877-429-1222888-597-1444888-851-3768888-851-5754888-865-2158888-866-6127888-866-6299 844-909-2777855-241-4508855-470-1718855-470-1720855-470-1721855-470-1724855-472-1830855-472-1832855-472-1833855-885-0741 855-472-1840855-472-1844855-626-2563855-805-1138855-805-1278855-805-1285855-827-2595855-827-3045855-885-0784855-885-0818 855-885-0830855-885-0833877-429-1222888-597-1444888-851-3768888-851-5754888-865-2158888-866-6127888-866-6299 833-801-7232844-762-9462844-762-9467844-793-6869844-793-8637844-794-5246844-794-6678844-794-6786844-796-2946844-833-8289 844-909-2777855-241-4508855-470-1718855-470-1720855-470-1721855-470-1724855-472-1830855-472-1832855-472-1833855-885-0741 855-472-1840855-472-1844855-626-2563855-805-1138855-805-1278855-805-1285855-827-2595855-827-3045855-885-0784855-885-0818 855-885-0830855-885-0833877-429-1222888-597-1444888-851-3768888-851-5754888-865-2158888-866-6127888-866-6299 833-801-7232844-762-9462844-762-9467844-793-6869844-793-8637844-794-5246844-794-6678844-794-6786844-796-2946844-833-8289 844-909-2777855-241-4508855-470-1718855-470-1720855-470-1721855-470-1724855-472-1830855-472-1832855-472-1833855-885-0741 855-472-1840855-472-1844855-626-2563855-805-1138855-805-1278855-805-1285855-827-2595855-827-3045855-885-0784855-885-0818 855-885-0830855-885-0833877-429-1222888-597-1444888-851-3768888-851-5754888-865-2158888-866-6127888-866-6299 fiannkipparisaac[.]casafilidelucianrus[.]casafloraabrahamsson[.]siteflorisburrparadies[.]spacefranceskint[.]casafrankmejias[.]spacefreddieholden[.]spacefredrikigland[.]sitefrigyesbakos[.]clubfulcovangemert[.]casagabrielduffy[.]casagabriellacunneen[.]clubgabriellamarsden[.]spacegaynorchevaliermollie[.]spacegeorgecreswick[.]icugermaisenia[.]unogertiereggyun[.]casagianninafonville[.]storegillianlindseymobley[.]casaginnikipvedis[.]casagiudittademetrestuppy[.]sitegiulioferrari[.]clubglennconantkaete[.]casagreerjorgangarcon[.]casagretchenmorgenfrans[.]casaguineveremorgenphilipson[.]spacegundolphochubbbaggins[.]spacegusursongerhard[.]spacegwendolenworthcower[.]clubhamzenolet[.]spacehanabinkykasevich[.]casahannahkaur[.]spaceharriottheodoricmartinez[.]spaceheidiingamarkaenel[.]casahollyhardy[.]spacehopechaddbrogle[.]sitehyacinthreuvengronseth[.]casaileanaroryfarika[.]casailonayusupova[.]spaceilsepiirto[.]casaingebergrudyjacintha[.]spaceingridharlinaekerly[.]casaiolandecreightonnona[.]spaceiritapietreklow[.]spaceisabelaalmeida[.]siteisembardgreenhand[.]storeissysydneycharmain[.]siteisumbrasbrandagamba[.]clubivalufilemonsen[.]casaivaluhansen[.]casaivalularsen[.]siteiversoreide[.]sitejacobsutherland[.]sitejacquelinehampson[.]spacejadechadzoara[.]casajaimecarliedaye[.]casajakebooth[.]clubjamesmiller[.]casajamesspofforth[.]clubjamieumstead[.]unojanholm[.]sitejareddubose[.]spacejaromirbrynda[.]casajaspercaraballo[.]casajeanellejermainoleg[.]casajeannabroderickgrunenwald[.]casajenniferreed[.]clubjenninelammondtorto[.]sitejennovankooij[.]icujerrileeharrydyun[.]casajesperkristoffersen[.]sitejessamynfreemonhibben[.]casajessisylvesterkenison[.]spacejillaynemagnumallys[.]spacejoaniealisteratwekk[.]casajoanywilting[.]casajoellydaltonhamel[.]sitejoeyrudolfrebhun[.]casajohnapascaleikey[.]casajohnclark[.]icujoinspinclass[.]comjordannaholttakken[.]casajorgritter[.]spacejosjasalah[.]sitejuansmotherman[.]clubjudiecosimoprudence[.]sitejulieravn[.]spacejuliettaheywooddunham[.]casakacyandershugon[.]sitekacybenoitarley[.]spacekajaaurthurzebulen[.]spacekalmandobos[.]sitekarenbrands[.]casakaritasvalberg[.]sitekarlenronniesaidel[.]casakarolgraememaye[.]spacekasperronning[.]casakasszaredphelan[.]spacekaterinechuchowinston[.]spacekatherinacedricbrynne[.]sitekatinarooseveltmattox[.]spacekatrinebrandt[.]casakatushapallardolino[.]spacekauecavalcanti[.]sitekayleeamorymafalda[.]casakeadaly[.]clubkerrychavez[.]icukessiaharonwentworth[.]spacekingapawlak[.]spacekippieeliasrachaba[.]spacekirakipplek[.]spacekirstialechulbard[.]spacekolosszegedi[.]sitekristelichaboderina[.]spacekristennowellsholley[.]casakristesylvesterblossom[.]casakristinejacobsen[.]sitekrysiawojciechowska[.]casakrystaltommyabell[.]casakylaasherrosenstein[.]spacekylamontishetrit[.]casalaneydavinangell[.]sitelarissasebastienhubie[.]spacelaurelhewbasset[.]sitelauriannegermaynealithia[.]casalauriannetobyevalyn[.]casaleannaralfpicardi[.]clublechoslawczarnecki[.]sitelesliestorey[.]casalettiiorgoscathe[.]spacelettitracegow[.]casaliaonio[.]siteliatimoteojacqui[.]casalivandrea[.]iculoisepatrickardie[.]spacelonnibasiliozirkle[.]casalorajerriprimavera[.]spacelorenzagiovannigiacomo[.]siteloriannalodovicoradloff[.]clublorrinrodmignonne[.]spacelucievanrinsum[.]clubluisbarros[.]casalynseybrunotatman[.]casamabwinfrededelsten[.]spacemaddyjarridolnee[.]sitemadelindarrelbruyn[.]casamarcellinevidovicmilinda[.]casamarcoklug[.]casamargarettedukieaeriel[.]spacemargitfreedmangrider[.]sitemargretedgarbabbie[.]casamargretglynnadelice[.]casamariamnilsson[.]site mariapfaff[.]casamariuslovstrom[.]casamariuszdudek[.]sitemarnizebulonmarchese[.]spacemasonpatel[.]spacemathildacaseopportina[.]sitemaurakonradebenezer[.]clubmauritznystrom[.]spacemaximinovaldes[.]casameghanncreightonoster[.]spacemeralvangeer[.]spacemerielbondonbelldas[.]spacemerisbuironstatis[.]casamerrillingeroscar[.]clubmerryfabioavruch[.]spacemeyaakesson[.]casamialeistad[.]spacemieszkoczarnecki[.]spacemikaelenoksen[.]sitemilissentflorychard[.]casamiriamvernesopher[.]spacemirnaandreyfischer[.]casamollieyveswestfall[.]sitemonahreamonnjacintha[.]casamorganajehukinchen[.]sitemuirenolanhaydon[.]sitemyrtleruss[.]casananagal[.]icunaomibolton[.]casanattybrendonleverett[.]casanedaholmesmilly[.]siteneddaboneamaras[.]clubnessiebogeyeugenio[.]sitenickieearliehelbona[.]sitenissaalfonsealexis[.]sitenixieholtadamski[.]spacenoravestre[.]sitenorbertschuil[.]casanoreanlarsornas[.]casanursellamo[.]spaceodelladevlinaleksandr[.]spaceodettafalknerlenni[.]siteoliverraaen[.]spaceolliemaclean[.]casaomarbazhaev[.]spacepaolaverhoef[.]spacepeggyakselsmalley[.]sitepenelopaelbertsonny[.]spacephilgiordanolibbey[.]sitepongorfoldesi[.]casapoppyinglissparke[.]casapoulkristensen[.]spacequinnagustezandt[.]casarafinelisse[.]barranabramran[.]casaraquelaeduinochiles[.]casaraymondsmith[.]casarayyangordon[.]casareavictorcherrita[.]casareynirjonatansson[.]sitereynirottosson[.]spacerianonkentonlira[.]spacericagaylebernie[.]sitericidewittflatto[.]spaceriviboyceyvento[.]siterivkahmayneazpurua[.]spaceroannefrancoisgenny[.]spaceroannestanislausolimpia[.]casarobertfoley[.]spacerobertsaunders[.]casarobertweaver[.]spaceronaldestep[.]casaronnymortiesanburn[.]casarosabelleellswertheisenhart[.]casaroseanniveadlay[.]casarosejaymeraouf[.]spacerosemondelelandneil[.]siterupertaeddiefalk[.]spacesabrinagaertner[.]spacesalviamugwort[.]spacesamamerigoaldridge[.]sitesamarialucienquinn[.]casasamarknape[.]unosamukatorok[.]spacesandraglebova[.]spacesanyaimmink[.]icusareeellereypenland[.]casasavinareinwaldsteffen[.]sitescarlettlaycatherina[.]siteshannonmanfredoctave[.]siteshaynefrancklynwynne[.]sitesheelafarrisgare[.]casasheila-kathryntysonlatia[.]clubsheilayork[.]spacesherriehankcha[.]casasherriraddiechester[.]casasibyllepearcelaney[.]sitesilviearaldorory[.]spacesimonefreitag[.]clubsisilehoweyivanah[.]casasiskolaatikainen[.]casasolsausamov[.]spacestarernestmcmillan[.]sitesuddhosi[.]comsuewaldotacklind[.]casasuomariihijarvi[.]casasuzywordenmycah[.]casasylviakroon[.]sitetallydewsheley[.]clubtaniburnabydarrill[.]casatanyarayhasty[.]casatedraadottinger[.]casateodorademetripettifer[.]casaterrinathanaelgahl[.]spacetheafrederiksen[.]spacethelmaantoniusibrahim[.]spacetheresawalsh[.]icutienanevillepetrine[.]casatillyby[.]clubtillyheerson[.]spacetimurvida[.]spacetinesidneefiedling[.]sitetomawyndhamrudolfo[.]spacetopivuorinen[.]sitetordamdal[.]sitetotalgodin[.]comtoussaintjobin[.]sitetrinemathiasen[.]sitetrudienehemiahblodget[.]spacetrungbliek[.]siteutairvinshirk[.]spaceveganystrom[.]spaceveroniquegilbertonickey[.]casavesteinnyngvason[.]spacevibrockienorina[.]casavincenzokaur[.]spacevinniechrissiearlynne[.]sitevioarbirgisson[.]spacevitoriaoliveira[.]casawallislonkerrill[.]clubwilcomesandheaver[.]sitewillhighett[.]clubwilliamsimonsen[.]casawynnedelmoremaison[.]spacewynnielorenprisca[.]casawynnyjobgratt[.]spacexavierholroyd[.]clubyingahmad[.]spaceyoshikojaeheisser[.]casazakariaeotter[.]spacezomborgyarmathi[.]casazorinetownspiegelman[.]casa Phone numbers 833-801-7232844-762-9462844-762-9467844-793-6869844-793-8637844-794-5246844-794-6678844-794-6786844-796-2946844-833-8289 844-909-2777855-241-4508855-470-1718855-470-1720855-470-1721855-470-1724855-472-1830855-472-1832855-472-1833855-885-0741 855-472-1840855-472-1844855-626-2563855-805-1138855-805-1278855-805-1285855-827-2595855-827-3045855-885-0784855-885-0818 855-885-0830855-885-0833877-429-1222888-597-1444888-851-3768888-851-5754888-865-2158888-866-6127888-866-6299…
WOOF locker: Unmasking the browser locker behind a stealthy tech support scam operation
Update [01-27-2020]: Shortly after this blog was published we noticed that a large part of the infrastructure behind this browlock was…
Scammers use old browser trick to create fake virus download
Tech support scammers are reusing an old technique in their existing browser locker (browlock) schemes to force a special kind of…
Mass WordPress compromises redirect to tech support scams
Content Management Systems (CMSes) such as WordPress, Drupal, or Joomla are under a constant barrage of fire. Earlier this year, we…
Partnerstroka: Large tech support scam operation features latest browser locker
Tech support scams continue to be one of the top consumer threats in 2018, despite actions from security vendors and law…
Did my comment on your blog get lost?
If you ever feel bad about your job because of mindless tasks you must perform day after day, or if you’re…
Where did the tech support scam blacklist go?
For about five years, we’ve maintained a blacklist of recognized tech support scammers, along with websites and phone numbers they might…
Tech support scam uses fake Shoppers Stop site to lure thousands
[Update 2018-06-22]: New URI patterns observed (probably for several days already). [Update 2018-05-17]: Shoppers Stop is a legitimate company based out…
Boomerang spam bombs Malwarebytes forum—not a smart move
Tech support scammers are generally not the best and brightest. As such, they will occasionally post ads for their fake companies…