|
![]() |
|||||||
![]()
![]()
![]() |
![]() Russian/American spammer, a spin-off or occasional partner with Alan Ralsky, Ibragimov, Lindsay and also the P/A/Y gang. In partnership with other Russians, he has grown this botnet fully-criminal spam operation into one of the world's largest, probably sending billions of spams each day. They recruit "affiliate" spammers using ads on many of the underground spam/crime forums. Does "OEM CD" pirated software spam, child and animal porn spam, porn payment collection, pharma/pills, phishing, and others. Does his own DNS, possibly does DNS for other spammers. Buys bulletproof hosting where ever he can get it. Noted for enormous numbers of domains (bogus registration info, of course), often rotating every three hours in the spam to avoid URIBL/SURBL/DBL type domain filters. Mails via proxy-botnests using the usual spamwares, probably off his own (leased) servers. Noted for having "fresh" peas (proxies), meaning he is very close to the botnet masters collecting new, unlisted, zombie IPs. Was part of Sun Network spamhaus on MCI, gets BP hosting in Brazil, China, Russia, etc. Some of his programs include: BadCow TaiwanMedia Pharmacy Express (PharmacyExpress) Some say he could be the "Pharmamaster" spammer who DDoS'd the BlueSecurity company. UPDATE: Arrested in Moscow on "multiple child molestation charges" on September 15, 2009. ![]() Partners in spam Pavka/Artofit and Yambo Financials Partner in spam Ruslan Ibragimov/Send-safe Partner in spam Alan Ralsky |
||||||
![]() The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies. |
![]() |
|