{"id":8170,"date":"2012-09-27T00:00:27","date_gmt":"2012-09-27T07:00:27","guid":{"rendered":"http:\/\/blog.webroot.com\/?p=8170"},"modified":"2018-01-30T12:23:16","modified_gmt":"2018-01-30T19:23:16","slug":"from-russia-with-iphone-selling-affiliate-networks","status":"publish","type":"post","link":"https://www.webroot.com/blog/2012\/09\/27\/from-russia-with-iphone-selling-affiliate-networks\/","title":{"rendered":"From Russia with iPhone selling affiliate networks"},"content":{"rendered":"

With affiliate networks<\/strong><\/a> continuing to represent among the few key growth factors<\/strong><\/a> of the cybercrime ecosystem, it shouldn’t be surprising that cybercriminals continue introducing new services and goods with questionable quality and sometimes unknown origins on the market, with the idea to entice potential network participants into monetizing the traffic they can deliver through black hat SEO (Search Engine Optimization), malvertising, and spam campaigns.<\/p>\n

In this post, I’ll profile a recently launched affiliate network selling iPhones that primarily targets Russian-speaking customers, and emphasizes the traffic acquisition scheme used by one of the network’s participants.<\/p>\n

More details:<\/p>\n

<\/p>\n

In my line of work, there’s a saying that “you are where you advertise.<\/em>”<\/p>\n

Despite the fact that your TOS (Terms of Service) may explicitly prohibit the use of black hat SEO (search engine optimization), which on the majority of\u00a0occasions\u00a0relies on compromised Web shells, next to good old fashioned spamming, coming across multiple advertisements on cybercrime-friendly forums speaks for itself – you’re not endorsing, but tolerating such traffic-boosting practices.<\/p>\n

Which is the case for the iPhones selling affiliate network I’m about to profile in this post.<\/p>\n

It all starts with a spam campaign offering brand new iPhones for a decent price in an attempt by one of the network participants to acquire traffic which will ultimately convert into sales.<\/p>\n

Sample spamvertised email offering cheap and easy-to-obtain iPhones:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

What we’ve got here is an example of an affiliate network participant targeting English-speaking users, even though the actual web site is targeting Russian-speaking users. Interested in taking a peek inside the iPhones selling affiliate network? Keep reading.<\/p>\n

Sample screenshot of the entry page for the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Second screenshot offering an inside peek into the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Third screenshot offering an inside peek into the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Fourth screenshot offering an inside peek into the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Fifth screenshot offering an inside peek into the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Sixth screenshot offering an inside peek into the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Seventh screenshot offering an inside peek into the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Eighth screenshot offering an inside peek into the iPhone selling affiliate network:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Ninth screenshot showcasing a sample landing page:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Tenth screenshot showcasing a sample landing page:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

We advise bargain hunters to avoid clicking on links found in spam emails, avoid entering their credit card details on sites found in spam emails, and to avoid purchasing any kind of item promoted in these emails.<\/p>\n

You can find more about Dancho Danchev at his\u00a0LinkedIn Profile<\/strong><\/a>. You can also\u00a0follow him on \u00a0Twitter<\/strong><\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

With affiliate networks continuing to represent among the few key growth factors of the cybercrime ecosystem, it shouldn’t be surprising that cybercriminals continue introducing new services and goods with questionable quality and sometimes unknown origins on the market, with the idea to entice potential network participants into monetizing the traffic they can deliver through black […]<\/p>\n","protected":false},"author":65,"featured_media":17052,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3005],"tags":[],"yst_prominent_words":[9675,11391,11387,11389,12169,12143,12161,12149,12141,12159,12153,12155,12145,12167,12151,12139,12163,12157,12147,12165],"acf":[],"_links":{"self":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/8170"}],"collection":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/users\/65"}],"replies":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/comments?post=8170"}],"version-history":[{"count":1,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/8170\/revisions"}],"predecessor-version":[{"id":23708,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/8170\/revisions\/23708"}],"wp:featuredmedia":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media\/17052"}],"wp:attachment":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media?parent=8170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/categories?post=8170"},{"taxonomy":"post_tag","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/tags?post=8170"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/yst_prominent_words?post=8170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}