Credit Card Thieves Hijacking Fake Advertorial News Sites

[JustTooMuchTime]

Credit card/ID theft thieves are latching on to home business sites and fake (advertorial) style news sites (both questionable in their own right, but not nearly as dangerous).

They are replicating those sites and taking people to unsecure payment pages. They are operating under hundreds of domains. Here's just a short list:

biz101news .com
biz102news .com
biz103news .com
biz104news .com
biz105news .com
biz106news .com
biz107news .com
biz108news .com
biz109news .com
biz110news .com
biz1flash .com
biz2flash .com
biz3flash .com
biz5flash .com
biz7flash .com
biz9flash .com
biz10flash .com
biz17flash .com
biz18flash .com
biz19flash .com
biz20flash .com
biz21flash .com
biz22flash .com
biz23flash .com
biz24flash .com
biz25flash .com
biz26flash .com
biz30flash .com
biz31flash .com
biz32flash .com
biz33flash .com
biz34flash .com
biz35flash .com
biz36flash .com
biz37flash .com
biz5flash.ru
biz6flash.ru
biz7flash.ru
biz8flash.ru
biz9flash.ru
biz10flash.ru
biz11flash.ru
biz12flash.ru
biz13flash.ru
biz14flash.ru
biz15flash.ru
biz16flash.ru
biz17flash.ru
biz18flash.ru
biz19flash.ru
biz20flash.ru
biz21flash.ru
biz22flash.ru
biz23flash.ru
biz24flash.ru
biz25flash.ru
biz26flash.ru
biz27flash.ru
biz28flash.ru
biz29flash.ru
biz30flash.ru
biz31flash.ru
biz32flash.ru
biz33flash.ru
biz34flash.ru
biz35flash.ru
biz36flash.ru
biz37flash.ru
bizdev1news.com
bizdev2news.com
bizdev3news.com
bizdev4news.com
bizdev5news.com
bizdev6news.com
bizdev7news.com
bizdev8news.com
bizdev9news.com
bizdev10news.com
bizdev11news.com
bizdev12news.com
bizdev13news.com
bizdev14news.com
bizdev15news.com
bizdev16news.com
bizdev17news.com
bizdev18news.com
bizdev19news.com
bizdev20news.com
new1flashreport .com
new2flashreport .com
new3flashreport .com
new4flashreport .com
new5flashreport .com
new6flashreport .com
new7flashreport .com
new8flashreport .com
new9flashreport .com
new10flashreport .com
new21flashreport .com
new22flashreport .com
new23flashreport .com
new24flashreport .com
new26flashreport .com
new27flashreport .com
new28flashreport .com
new29flashreport .com
new30flashreport .com
new31flashreport .com
new32flashreport .com
new33flashreport .com
new34flashreport .com
new35flashreport .com
new36flashreport .com
new37flashreport .com
new38flashreport .com
new39flashreport .com
new40flashreport .com
new41flashreport .com
new43flashreport .com
new44flashreport .com
new45flashreport .com
new1reports .ru
new2reports .ru
new3reports .ru
new4reports .ru
new5reports .ru
new6reports .ru
new7reports .ru
new8reports .ru
new9reports .ru
new10reports .ru
new11reports .ru
new12reports .ru
new13reports .ru
new14reports .ru
new15reports .ru
new15reports .ru
new16reports .ru
new17reports .ru
new18reports .ru
new19reports .ru
new20reports .ru
new21reports .ru
new22reports .ru
new23reports .ru
new24reports .ru
new25reports .ru
new26reports .ru
new27reports .ru
new28reports .ru
new29reports .ru
new30reports .ru
new31reports .ru
new32reports .ru
new33reports .ru
new34reports .ru
new35reports .ru
new36reports .ru
new37reports .ru
new38reports .ru
new39reports .ru
new40reports .ru
new41reports .ru
new42reports .ru
new43reports .ru
new44reports .ru
new45reports .ru
new46reports .ru
new47reports .ru
new48reports .ru
new49reports .ru
new50reports .ru
news1dailyflash .com
news2dailyflash .com
news3dailyflash .com
news9flash .com
news200flash .com
news201flash .com
news202flash .com
news203flash .com
news204flash .com
news300flash .com
news301flash .com
news302flash .com
news303flash .com
news304flash .com
news305flash .com
news306flash .com
news307flash .com
news400flash .com
news401flash .com
news402flash .com
news403flash .com
news404flash .com
news500flash .com
news501flash .com
news502flash .com
news503flash .com
news504flash .com

There are hundreds more and new ones are popping up daily.

Many of them have lead to a fake version of a site called "Home Wealth Solution" (again questionable in it's own right).

[Whip]

Wonder if this is the same group that's doing this:

Ebook websites, fraud charges, Devbill/DigitalAge/Pluto - Scam and Phishbusters | DSLReports Forums (http://www.dslreports.com/forum/r19620593-Ebook-websites-fraud-charges-Devbill-DigitalAge-Pluto)

[JustTooMuchTime]

Wonder if this is the same group that's doing this:

Ebook websites, fraud charges, Devbill/DigitalAge/Pluto - Scam and Phishbusters | DSLReports Forums (http://www.dslreports.com/forum/r19620593-Ebook-websites-fraud-charges-Devbill-DigitalAge-Pluto)

Wow, that's a great write-up. Would take some serious cranking of something like Maltego to figure all this out. Thanks for the reference though - gives us more to dig into, eh?

[Whip]

Wow, that's a great write-up. Would take some serious cranking of something like Maltego to figure all this out. Thanks for the reference though - gives us more to dig into, eh?

Yeah....that whole thing just fascinates me. Only problem is, the key sleuth in all that, MGD, appears to be MIA for quite awhile. Hope nothing happened to him.