Celebrity-Themed Scareware Campaign Abusing DocStoc and Scribd
A currently ongoing scareware campaign is using celebrity-themed blackhat SEO tactics in order to hijack legitimate traffic by abusing the popular DocStoc and Scribd document-sharing services. What’s the single most interesting thing about this campaign anyway? It’s fact that one of the domains parked on the same IP that the rest of the malware and exploit serving ones are — they naturally multi-tasking and engage in drive-by attacks — newsoff .net has been registered with the same email pvcprotect@gmail.com as the original gumblar .cn domain.
Read more here:
Celebrity-Themed Scareware Campaign Abusing DocStoc and Scribd