{"id":11372,"date":"2018-02-05T11:10:03","date_gmt":"2018-02-05T19:10:03","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/02\/05\/news-5143\/"},"modified":"2018-02-05T11:10:03","modified_gmt":"2018-02-05T19:10:03","slug":"news-5143","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2018\/02\/05\/news-5143\/","title":{"rendered":"Boomerang spam bombs Malwarebytes forum\u2014not a smart move"},"content":{"rendered":"

Credit to Author: William Tsing| Date: Mon, 05 Feb 2018 17:57:42 +0000<\/strong><\/p>\n

Tech support scammers are generally not the best and brightest. As such, they will occasionally post ads for their fake companies in the comment sections here or on the Malwarebytes forums. Last week, however, scammers struggled with configuring their spambots, resulting in spam bombs on the forum lasting roughly 72 hours, with a slow taper down for two more days.<\/p>\n

Over six days, 246 spam accounts associated with this activity were banned. We wondered what threat actor group would exercise such phenomenally poor judgment, so we drilled down a bit into who these people are.<\/p>\n

\"\"<\/p>\n

As it turns out, the majority of the spam was posted for a threat actor we were already familiar with: Boomerang Tech Solutions. Boomerang scams using an AV theme, so they need to use the Malwarebytes brand to appear properly comprehensive to victims. They will also look to legitimate AV customers for scam targeting. Over the past year, Boomerang has:<\/p>\n