New research reveals a large-scale fulfilment centre for malware-distributing phishing campaigns that’s like a malware version of Amazon’s fulfilment model
Researchers have discovered a bunch of web servers in the United States that are actively being used to distribute a large-scale spam campaign featuring a veritable who’s who of malware families. The fact that the hosting infrastructure, thought to be part of the Necurs botnet, is located in the US rather than a jurisdiction less cooperative with law enforcement demands appears risky; but the threat actors are actually playing clever here.