A new rogueware site by Pandora Software appeared today. For those of you who do not know, Pandora Software is one of the rogue affiliate systems that produce the software for resellers to distribute. You can see more information on how rogueware affiliate systems work in our related post entitled, “Anatomy of a Rogue Security Campaign.“ The domains involved are registered at INTERNET.BS and we have noticed that being the trend especially since ICANN yanked EstDomains in November. The MS AntiMalware rogue download is not available at the moment of our post but the merchant links are active and pointing to a shopping cart selling a “6 month license” for $37.95.
Payment Gateway whois
Site: vsoftstore.com
Registrar: INTERNET.BS CORP.
IP Address: 209.8.25.244
IP Location: - District Of Columbia - Washington - Beyond The Network America Inc