Dynamoo's Blog
Malware, spam, scams and random stuff, by Conrad Longmore.
Showing posts with label
Netserv Consult SRL
.
Show all posts
Showing posts with label
Netserv Consult SRL
.
Show all posts
Friday, 23 September 2011
dfrgcc.com injection attack in progress
›
Thousands of sites are currently being hit by an injection attack pointing to dfrgcc.com/ur.php a domain registered to someone using the in...
4 comments:
Wednesday, 21 September 2011
Evil network: RONET / ro-net.eu (91.229.90.0/23)
›
RONET (aka. ro-net.eu) seems to be a new netblock occupying the 91.229.90.0/23 (91.229.90.0 - 91.229.91.255) range. This block has several ...
Wednesday, 14 September 2011
Injection attack: malavasso.com, migraviro.com and montenegrorio.com
›
Three more domains being used in injection attacks today: malavasso.com migraviro.com montenegrorio.com The payload is the Sinowal tro...
bundespol.com is not the Bundespolizei
›
Another fake Bundespolizei today, bundespol.com is registered through a Chinese registrar and then is anonymised through a Chinese WHOIS pr...
Thursday, 14 July 2011
yahlink.php / DreamHost hack
›
Almost identical in every way to this injection attack , several Dreamhost sites have been compromised with a page called yahlink.php (it wa...
1 comment:
Friday, 8 July 2011
Evil network: hotmailbox.com
›
The domain hotmailbox.com often comes up when looking at malicious domains, it's a domain used to provide a bulletproof email address...
›
Home
View web version