Spam affiliate programme to close

2012-02-01

Helen Martin

Virus Bulletin, UK
Editor: Helen Martin

Abstract

GlavTorg network ceases to promote sites selling imitation designer goods.


By the time this issue of Virus Bulletin is published, there will be one less affiliate programme generating spam to clog up our inboxes.

GlavTorg.com was run by the people behind the prolific Glavmed/SpamIt operations which pushed out massive volumes of Canadian pharmacy spam until closing their doors in October 2010, claiming that increased attention on the business had made it impossible to continue. GlavTorg marketed sites selling cheap imitations of designer goods.

At the end of December 2011, GlavTorg affiliates were notified that the network was to be shut down and that they would not receive payment after 31 January. A message read:

'Dear partners, We would like to inform you that we have decided to close the trade direction replica handbags and clothing. The reasons for this decision and are associated with economic deterioration in the quality of products provided by our suppliers. We believe that any business should be to balance the interests of buyers and sellers, which has recently become disturbed.'

Researcher Brian Krebs suggests that the downfall of GlavTorg may partly have been due to brand owners taking action against those selling knock-offs of their products – in September, Chanel took legal action against several entities including one of GlavTorg’s primary merchandising sites.

Cisco and several other sources reported a decrease in global spam volumes immediately following SpamIt’s closure in October 2010. It remains to be seen whether the closure of GlavTorg will have a similar effect.

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest articles:

Nexus Android banking botnet – compromising C&C panels and dissecting mobile AppInjects

Aditya Sood & Rohit Bansal provide details of a security vulnerability in the Nexus Android botnet C&C panel that was exploited to compromise the C&C panel in order to gather threat intelligence, and present a model of mobile AppInjects.

Cryptojacking on the fly: TeamTNT using NVIDIA drivers to mine cryptocurrency

TeamTNT is known for attacking insecure and vulnerable Kubernetes deployments in order to infiltrate organizations’ dedicated environments and transform them into attack launchpads. In this article Aditya Sood presents a new module introduced by…

Collector-stealer: a Russian origin credential and information extractor

Collector-stealer, a piece of malware of Russian origin, is heavily used on the Internet to exfiltrate sensitive data from end-user systems and store it in its C&C panels. In this article, researchers Aditya K Sood and Rohit Chaturvedi present a 360…

Fighting Fire with Fire

In 1989, Joe Wells encountered his first virus: Jerusalem. He disassembled the virus, and from that moment onward, was intrigued by the properties of these small pieces of self-replicating code. Joe Wells was an expert on computer viruses, was partly…

Run your malicious VBA macros anywhere!

Kurt Natvig wanted to understand whether it’s possible to recompile VBA macros to another language, which could then easily be ‘run’ on any gateway, thus revealing a sample’s true nature in a safe manner. In this article he explains how he recompiled…


Bulletin Archive

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.