Dynamoo's Blog

There is currently an injection attack using a script pointing to [donotclick] xinthesidersdown.com/sl.php  doing the rounds. The malicious...

The injection attacks from lizamoon.com and other domains continue.. and they link back to a popular blog post about a very different atta...

adbnr.ru seems to be the latest domain to be used by the bad guys in this current round of injection attacks. The injected code to look fo...

I haven't had time to look at this fully, but it seems that a fresh round of Asprox attacks have started after several months of inactiv...

This seems to be an emergent threat at this moment - a number of ASP / SQL / Windows site have been hit with a SQL injection attack with the...

A couple of items of interest from The Register: OpenDNS rolls out Conficker tracking, blocking This seems like a great idea, especially ...

Another domain to look for in SQL injection attacks is dbrgf.ru , still calling script.js . Checking your proxy logs for ".ru/script.js...

A fresh round of SQL injections seem to be on the march, with (at least) two new domains being injected into vulnerable sites: www.lijg.ru ...

This looks like a case of the Chinese hacking the Chinese again, with a very large number of domains being injected into legitimate sites. T...

A new bunch of domains being used in SQL injection attacks at the moment: www.msngk6.ru www.dft6s.kz These are calling a script called style...

The Silent Noise blog reports that a fresh round of SQL injection attacks by the Asprox crew are under way. They seem to be using a variety...

The ISC have given some good guidance on SQL injection mitigation , in case your server has been hit by Asprox or something similar. It'...

There has been a shift overnight in the domains used in the Asprox SQL injection attack, the ones to look for are: 47mode.name berjke.ru 81d...

Another Asprox SQL injection domain to block / check for is lang42.ru . The following domains have been active in the past 24 hours: 53refer...

After being stable for some time, the Asprox SQL injection hacks are now redirecting through a new bunch of .ru domains. 30area.ru 4log-in.r...

The Asprox botnet is still active but has been remarkable stable with no new domains in the past week, and 88% of the traffic going to deryv...

Another bunch of Asprox domains that have been active over the past few days are listed below. As usual, block these or check your logs for ...

There has been a slight shift in tactics by the Asprox gang in their SQL Injection Attacks in that they are now using a packer on their java...

Briefly popping up on the Asprox SQL Injection radar yesterday was h3x.info, specifically a call to h3x.info/index.php [dangerous site, do...

mnbenio.ru is a new Asprox SQL injection domain that has been active in the past 24 hours, the following four domains are the most active: ...