miekiemoes' Blog: Your illegal internet activities are being logged

Sunday, August 17, 2008

Your illegal internet activities are being logged

I've found at lot of posts at several different forums recently where people are discussing a mail they received from MediaDefender which says that their illegal internet activities are being logged.

Content of the mail:

Dear User!
Your recent internet activity was logged on the following sites:
• Btjunkie
• SumoTorrent
• isoHuntBtscene
• Mininova
• Fenopy
• Monova
• Yotoshi
• GetInvites
• Btmon
We have attached a report about the copyrighted movies, music, softwares you downloaded or searched on these webpages. We strongly advise you to stop any future activities regarding the downloading of illegal content or you can expect prosecution by 17 U.S.C. §§ 512, 1201?1205, 1301?1332; 28 U.S.C. § 4001 laws.

Sincerely,
MediaDefender Inc.

This mail also contains an attachement, a so called report of their illegal activities. Ofcourse the attachement is malicious and appears to be a W32.Mytob@mm variant.

Sneaky tactic since many people actually do use P2P in order to get their (illegal) software from, so they will certainly open the attachement (if not removed by their Antivirus already) to see what exact activities are being logged.
If you recieve similar mail, delete it asap and certainly do not open the attachement.

More detailed info and screenshots of the mails can be found at TrendLabs

Comments (4)

Logging you in...

Dashboard | Edit profile | Logout

Logged in as

+3 Vote up Vote down

David Goodwin · 863 weeks ago

Ah hah; I received one of these this morning; interestingly it didn't appear to have any obvious typos or grammatical errors - but the .zip attachment was missing due to a mail server (upstream somewhere) removing it.

So I was partly wondering how they linked a work-only email address to torrent usage, and as I don't use any of the mentioned sites I was scratching my head somewhat wondering "Is this real? What was in that .zip file? It looks like it could be real - but why would mediadefender send their mail through an Indian company?"

A quick google gives your post... *sigh* ; thanks!

David.

+3 Vote up Vote down

Cliff · 857 weeks ago

Well they are at it again. I just got this email this morning. Thanks for the heads up. Google does work, that is how I found this information. I to wondered what they were talking about when this is my work only email as well. The .zip attachment made it through, don't know why. The zip file was stopped by my virus detector once I opened the email.

+4 Vote up Vote down

Paul_Selzer 0p · 841 weeks ago

Who can you contact to get these Pranksters from MediaDefender arrested and their equipment confiscated? I thought the FBI had this taken care of with their "Einstein" software. I reported them to Yahoo but nothing has happened.