Banks Receive Fake Training CDs from NCUA...oh wait...

As reported by the SANS Internet Storm Center, some banks reported receiving what appeared to be letters and training materials from the National Credit Union Administration (NCUA). The training materials consisted CDs.

Then you hear this over the PA system:

This was a test of the emergency broadcast system. This was only a test.

Closer inspection reveals that the letters were fake and the CDs contained malware. Pretty interesting scam involving physical world and computer security.

Ha. So Brent Huston from Microsolved contacts the SANS folks letting them know that he sent those as part of a penetration test his company was performing. Wow, good test and probably was successful. I bet some people put those CDs in their computers.

This was a great awareness event for training our users. I fully expect to see the criminals start using this technique more. :(

Domains Registered with Obama's Name Recently

Well now with the US presidential election being over I thought I'd poke around the Internet domain records to see what names have been registered. I see that around the November 3rd thru 4th time frame no fewer than 312 names have been registered with the word 'obama' in them. Most are parked right now.

Some of the more interesting ones...
.
impeach-president-barack-obama.com
impeachobama2day.org
obama-recall.com
defeatobama2012.com
outwithobama.info
outwithobamain2012.biz

Some scary ones (secret service might want to watch these)...
dontkillobama.org
endofobama.org
keepobamaalive.com

obamahacker.com
This guy is definitely not a fan of Barack. On this site he says that "46% of the country did not vote for Barrack Obama". You know, if he's a Republican I need to remind him that during the 2000 election 48.4% of America did not vote for George W. Bush. As a matter of fact the MAJORITY of Americans voted for the Democrat Al Gore. Short memory there Mr. ObamaHacker.

iblameobama.com
For what? Winning the election?

Must be some of the $250K+/yr folks...
obamaraisedmytaxes.info
obamaraisedmytaxes.org
obamaraisedmytaxes.us
obamataxedmeoutofbusiness.com
obamataxedmeoutofwork.com
obamataxedmybusinesstodeath.com
obamataxedmycompanyaway.com
obamataxedmyjobaway.com

Did John McCain register this one?
obamatookmyjob.com

Interestingly, some of these names are hosted on the same servers where some malware and fake security software reside. This does not mean these sites are bad, just interesting. I personally suspect some might be fake websites used in attacks against unsuspecting victims, but nothing has been detected at this time.

Now onto more non-political items...