Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Showing posts with label Netserv Consult SRL. Show all posts
Showing posts with label Netserv Consult SRL. Show all posts
Friday, 23 September 2011

dfrgcc.com injection attack in progress

›
Thousands of sites are currently being hit by an injection attack pointing to dfrgcc.com/ur.php a domain registered to someone using the in...
4 comments:
Wednesday, 21 September 2011

Evil network: RONET / ro-net.eu (91.229.90.0/23)

›
RONET (aka. ro-net.eu) seems to be a new netblock occupying the 91.229.90.0/23 (91.229.90.0 - 91.229.91.255) range. This block has several ...
Wednesday, 14 September 2011

Injection attack: malavasso.com, migraviro.com and montenegrorio.com

›
Three more domains being used in injection attacks today: malavasso.com migraviro.com montenegrorio.com The payload is the Sinowal tro...

bundespol.com is not the Bundespolizei

›
Another fake Bundespolizei today, bundespol.com is registered through  a Chinese registrar and then is anonymised through a Chinese WHOIS pr...
Thursday, 14 July 2011

yahlink.php / DreamHost hack

›
Almost identical in every way to this injection attack , several Dreamhost sites have been compromised with a page called yahlink.php (it wa...
1 comment:
Friday, 8 July 2011

Evil network: hotmailbox.com

›
The domain hotmailbox.com often comes up when looking at malicious domains, it's a domain used to provide a bulletproof email address...
›
Home
View web version
Powered by Blogger.