Yes. Not sure if you saw my message on Wilders or you found it yourself.

Can I be honest here? This looks like is going to be a tragedy. They have found a consistent way to fool AVs; they seem to have a server-side switching/repacking of the executables and very, VERY few seem to keep up (and definitely that doesn't include the "big" players: I haven't seen Norton and Microsoft find a single one on the multiple sites). Most miss all of them, a few find some. Most consistent seems to be NOD32, but it's still hardly reliable.

In the meanwhile, in the lair of the wolf iframecash.biz they claim that "the new anti antivirus is up".

And all this in the clear, with nobody bothering them. They install trojans, keyloggers, most probably control more than a few botnets, they crack forums to plant exploits, seem well founded and with plenty of time to keep this rolling. Who's founding them? Organized crime?
TNT | Homepage | 06.05.06 - 4:29 pm | #

intresting post.
Susie | 06.05.06 - 5:05 pm | #

Read this
http://videoscash.com/
http://www.master-x.com/search/f...Fmode% 3Dresults
This is really russian organized crime.
Martin | 06.06.06 - 5:30 am | #

Hosted by Intercage again.

OrgName: InterCage, Inc.
OrgID: INTER-359
Address: 1955 Monument Blvd.
Address: #236
City: Concord
StateProv: CA
PostalCode: 94520
Country: US

aka Atrivo.com:

NetRange: 69.50.160.0 - 69.50.191.255
CIDR: 69.50.160.0/19
NetName: INTERCAGE-NETWORK-GROUP
NetHandle: NET-69-50-160-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: MAIL.ATRIVO.COM
NameServer: PAVEL.ATRIVO.COM
Comment:
RegDate: 2003-06-04
Updated: 2005-09-01

Allegedly based in the US. Intercage is so often involved in this activity that it's clear they must be actively involved.
Conrad Longmore | Homepage | 06.06.06 - 8:45 am | #