YouTube Turns Off Ad Revenue For Fake Movie Trailer Channels After Deadline Investigation

https://deadline.com/2025/03/youtube-ad-revenue-fake-movie-trailer-screen-culture-1236354143/

Oh, internationales Geflügel! Ein polnisches Hühnchen mit rumänischer Mastodon-Adresse und tschechischer Friendica-Seite möchte in Kanada deutsche Bitcoins, was mir spanisch vorkommt.

Malicious actors have taken notice of news about the US Social Security System. We've seen multiple spam campaigns that attempt to phish users or lure them to download malware.

Emails with subjects like "Social Security Administrator.", "Social Security Statement", and "ensure the accuracy of your earnings record" contain malicious links and attachments.

One example contained a disguised URL that redirected to user2ilogon[.]es in order to download the trojan file named SsaViewer1.7.exe.

Actors using social security lures are connected to malicious campaigns targeting major brands through their DNS records.

Block these:

user2ilogon[.]es
viewer-ssa-gov[.]es
wellsffrago[.]com
nf-prime[.]com
deilvery-us[.]com
wllesfrarqo-home[.]com
nahud[.]com.

#dns #lookalikes #lookalikeDomain #threatintel #cybercrime #threatintelligence #cybersecurity #infoblox #infobloxthreatintel #infosec #pdns #malware #scam #ssa

I saw the news that ATProto relay is now very cheap to run, and went to check it. Turns out "cheap" means 10 GB RAM, 500 GB SSD, 50mbps bandwidth. This is more than minimum Ethereum node requirements, and I am not sure how it could possibly be worse than that.

Needless to say, relay is only one component in their laughably inefficient system, which is still not decentralized in any meaningful way.

Hahaha

https://bsky.app/profile/rmac.bsky.social/post/3llhsjtm5q22j

Last week, while reviewing detected lookalike domains, one in particular stood out: cdsi--simi[.]com. A quick search pointed him to a legitimate U.S. military contractor, CDSI, which specializes in electronic warfare and telemetry systems. It's legitimate domain cdsi-simi[.]com features a single hyphen, whereas the lookalike domain uses two hyphens.

Passive DNS revealed a goldmine: a cloud system in Las Vegas hosting Russian domains and other impersonations of major companies.

Here are a few samples of the domains:

- reag-br[.]com Lookalike for Reag Capital Holdings, Brazil.
- creo--ia[.]com Lookalike for an industrial fabrication firm in WA State.
- admiralsmetal[.]com Lookalike for US based metals provider.
- ustructuressinc[.]com Lookalike Colorado based Heavy Civil Contractor.
- elisontechnologies[.]com Typosquat for Ellison Technologies machine fabrication.

#dns #lookalikes #lookalikeDomain #threatintel #cybercrime #threatintelligence #cybersecurity #infoblox #infobloxthreatintel #infosec #pdns #phishing #malware #scam #dod

Important

I have found a scammer on mastodon.social called sagego.ca. He will DM you. Do not fall for this scam

How did I know that this person is a scammer?

I found a video of a scam discord server. Luckly the pfp on the thumbnail somehow matches the user profile

Here is the video https://www.youtube.com/watch?v=k-iPRlZW5oU&t=304s&pp=ygUbaW52aXRlIHNlcnZlciBkaXNjb3JkIHNjYW0g

Elevated number of scam calls with fraudulent caller ID from my bank today. Won't leave voicemail. Won't talk to the automatic screener.

If they have anything interesting to say, they'll send me a letter.

Never accept calls or emails from business or govt. you deal with. Call them yourself, at the number found on their website or paper documents.

Possible Phishing
on: hxxp[:]//webtitles[.]github[.]io/amazon
Analysis at: https://urldna.io/scan/67e435f43b7750000c659d06
#cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing
on: hxxps[:]//identifiez-vous55[.]godaddysites[.]com/identifiez-vous
Analysis at: https://urldna.io/scan/67e433d03b7750000bf70354
#cybersecurity #phishing #infosec #urldna #scam #infosec

#scam
What do documentaries like „The Tinder Swindler“ and „Con Mum“ teach us?

If someone comes into your life, lovebombs you… and later asks you for your money, because they have an emergency or something like that? Run! And block them, before they can scam you even more.

The Tinder Swindler
https://www.imdb.com/de/title/tt14992922/

Con Mum
https://www.imdb.com/de/title/tt35955855/

Google has let a scam version of their own product become the #1 search result

Spoiler: It's not your mum.
---
'Hi Mum' scam continues to trick parents three years on from first texts reported in Australia https://www.abc.net.au/news/2025-03-26/hi-mum-scam-texts-rise-public-education/105095266