chris larsen @bc_malware_guy

Web Malware/Threat Researcher at Broadcom Software (Symantec). symantec-enterprise-blogs.security.com/blogs/ Joined August 2010

Tweets

762
Followers

1K
Following

276
Likes

25

chris larsen @bc_malware_guy

3 years ago

haven't done a #shady_domain_name_of_the_day in a loooong time, but... annoyingwebsite[.]com was re-reg'ed and its new life is part of a korean gambling network, so still an appropriate name

0 0 2 0 0

chris larsen @bc_malware_guy

4 years ago

#shadydomainoftheday hardshipbutt[.]xyz sometimes the name says it all...

0 0 1 0 0

chris larsen @bc_malware_guy

4 years ago

#shadydomainnameoftheday multiprotocolmeteorologists[.]pw -- note the plural: apparently there are more than one of them...

0 1 2 0 0

chris larsen @bc_malware_guy

5 years ago

#ShadyDomainNameOfTheDay: performnewestextremelyapplication[.]icu -- begs the question, "extremely what?" (I would answer "Unwanted")

0 0 3 0 0

chris larsen @bc_malware_guy

6 years ago

#shadydomainnameoftheday - fake site (notice misspelling), but they're not drawing much traffic: washigntontime[.]com

1 0 3 0 0

chris larsen @bc_malware_guy

6 years ago

#ShadyDomainNameOfTheDay: loadspeedyextremelyapplication[.]icu ...sounds cool, they just need to shorten that domain name a bit (and create a legit app)

0 0 2 0 0

chris larsen @bc_malware_guy

6 years ago

#shadydomainnameoftheday : hidethisharmfulradiations[.]recipes -- maybe for when that curry gets *really* spicy...

0 0 1 0 0

chris larsen @bc_malware_guy

6 years ago

#shadydomainnameoftheday -- statedexcreti[.]fun -- proof that the Bad Guys have fun excreting their random domain names

0 0 1 0 0

chris larsen @bc_malware_guy

6 years ago

Best part of joining Broadcom may be that the "bc_" in my handle is meaningful again. :)

1 0 9 0 0

chris larsen @bc_malware_guy

6 years ago

fun/scary read: non-Amazon devices on your account don't show up, so a great path to fraud... reddit.com/r/netsec/comme…

0 0 1 0 0

What would you do if you receive an email at work asking you to make an urgent unexpected payment? Would you suspect you could be the target of a #BEC scam? Learn about #INTERPOL's campaign to raise awareness of this fraud and how to #BECareful : interpol.int/News-and-Event…

9 41 72 0 2

chris larsen @bc_malware_guy

6 years ago

#shadydomainnameoftheday pleadawful[.]icu (if you can't plead guilty, plead awful...)

0 0 1 0 0

chris larsen @bc_malware_guy

6 years ago

Poking into a network of shady "pharmacy" sites. All 20 had valid HTTPS certs. Nice to know that even the very bottom-feeding spam/scam folks are making their sites safe to visit. I feel so much better. #signofthetimes

0 0 3 0 0

chris larsen @bc_malware_guy

6 years ago

shady domain of day: smenqskfmpfxnb[.]bid (honk if you think naming your webad domain like a dga is a totally awesome idea)

0 0 1 0 0

chris larsen @bc_malware_guy

6 years ago

BEC keeps growing: 18K victims, $362M lost, in 2018. ic3.gov/media/2019/190…

0 0 0 0 0

chris larsen @bc_malware_guy

6 years ago

Ironically, fishingcreation[.]info has repeatedly hosted phishing content (e.g., /wells/) -- maybe they should change their domain name to phishingcreation?

0 0 1 0 0

chris larsen @bc_malware_guy

7 years ago

after long hiatus... the Shady Domain Name of the Day returns! methaneseer[.]webcam (even if it *were* a webcam site, it wouldn't be one to watch...)

0 1 3 0 0

chris larsen @bc_malware_guy

7 years ago

#ShadyDomainNameOfTheDay: axiom6g[.]gdn (I think axiom 6 is "don't trust new .gdn domains")

0 0 0 0 0

chris larsen @bc_malware_guy

7 years ago

We were right about Dolphin not needing two more years to eat its two-millionth phish (symantec.com/blogs/expert-p…) - that happened some time last week. :)