Sponsored by..

Friday 27 July 2012

Malware on online-gaminatore.ru

Another malicious spam run, although I don't have a sample of the actual spam this time.. however, the payload is at [donotclick]online-gaminatore.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here), hosted on the following IPs:

89.111.177.151
203.80.16.81
78.83.233.242

These IPs have been used several times recently and should be blocked.

No comments: