Hacker's ramblings

On Friday 11th November, I got yet another Baidu-link from one of the same contacts, I've already received some.

As I've been communicating with the persons who are "sending" me these links, they have changed their Skype-password for their old logins since this incident gained publicity. At this point, I'm ready to bet serious money on the fact, that this is not what Microsoft officals state, a case of re-using leaked passwords. This is a serious incident with protocol having a security flaw which is being exploited by somebody who loves pointing a finger to Baidu. As the link-jumping ends at a fake Forbes site with a fake article about a miracle pill allowing you to access 100% of your brain, I don't think Chinese have anything to do with this case. IMHO this points to Russia based on the fact, that this link rotator is located in a .ru-domain and is located in St. Petersburg, Russia.

This is how the fake Baidu-link redirects your request:

• Initial site sent via Skype: http://www.baidu.com/link
• Link rotator: http://acondi.ru/
• Taget sites:
  • http://dietzzfocon.com/ (USA)
  • http://exsuperbrain.com/ (UK)
  • http://weightuulossu.com/ (Netherlands)
  • http://zbiginbrain.com/ (Netherlands)
  • http://infocoolvip.com/ (Netherlands)
  • http://habzbrain.com/ (USA)
  • http://dietzzfocon.com/ (USA)

Microsoft:
Get your heads out of the sand! You have an issue to fix here.