Re: Buying Web Malware Samples

[Cal Leeming <cal () foxwhisper co uk>]

Actually, just out of curiosity, why do you need to purchase malware
samples?

On Wed, Mar 9, 2011 at 7:19 PM, Cal Leeming <cal () foxwhisper co uk> wrote:

> 1) You are requesting this from a gmail address. Not a good look.
>
> 2) You aren't representing yourself as a company entity, which indicates
> you might want this malware for malicious purposes.
>
> 3) Looks like you're trying to bullshit tbh.
>
> Just my two cents.
>
> On Wed, Mar 9, 2011 at 6:34 PM, John Harwold <johnharwold () gmail com>wrote:
>
> > I need (JS/PDF/HTML/Exploit) malware samples, and I'm not a cheater.
> > If I say that I'll pay 500$ for best submission, I'll pay 500$ for it.
> >
> > I won't pay before I see the stuff.
> > I don't want to pay 500$ for big zip file with garbage in it.
> >
> > Best submission will be rewarded with 500$. That's it.
> > If you have what I need, and you are not satisfied with this arrangement,
> > find a way in which we'll both be satisfied...
> > give me access to place where I can inspect them or something like that.
> >
> > Sincerely,
> > J.H.
> >
> >
> > On Wed, Mar 9, 2011 at 7:21 PM, McGhee, Eddie <Eddie.McGhee () ncr com>wrote:
> >
> > >  Yes lets all send out malware samples and *hope* you actually pay the
> > > best submission, tell you what send me the $500 and ill send you a pretty
> > > comprehensive tar full of samples.
> > >
> > >
> > >  ------------------------------
> > > *From:* full-disclosure-bounces () lists grok org uk [mailto:
> > > full-disclosure-bounces () lists grok org uk] *On Behalf Of *John Harwold
> > > *Sent:* 09 March 2011 16:35
> > > *To:* full-disclosure () lists grok org uk
> > > *Subject:* [Full-disclosure] Buying Web Malware Samples
> > >
> > > Hi folks,
> > >
> > > I'm buying web malware samples... obfuscated malicious javascript, web
> > > exploit kits, pdf malware, browser/activex exploits, etc.
> > > I'm not interested in executable (PE/ELF) malware.
> > > Contact me on email with download URL, or send ZIP/TAR/RAR malware
> > > archive directly to my email (with changed archive extension to .MAL because
> > > of gmail filtering).
> > >
> > > After two weeks, contributions will be revisited and person with largest
> > > collection of real web malware will receive prize of 500$.
> > >
> > > Bye,
> > > J.H.
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/