Select Page


From Francesco, in our spyware research team:

Here’s a screenshot from one of the sites from the “Ricercadoppia/Lowzones” spammers/hidden dialers installers.

Coprocefalo literally means “sh*t” (copro) “head” (cefalo) and “zombie maker”. Iit’s pretty obvious what it means, especially since their trojan infector that allows them to send spam creates the file “cefalo.exe”.

In the past, this group has also been seen installing the Zango toolbar (and we suspect they may still be doing that).

Alex Eckelberry