RSS Feed
Twitter
... When it's an exploit of course!This URL (vURL results, PDF);nit99.biz/myy/viewtopic.php?s=bec8f62472wants us to believe it's a forum, that's going to let us view the respective topic associated with the ID in the s= variable. Alas however, it's neither a valid ID, nor a forum at all. What you'll actually get, is a whole host of badness battered down the pipes onto your poor machine.And what
This is featured post 1 title
Replace these every slider sentences with your featured post descriptions.Go to Blogger edit html and find these sentences.Now replace these with your own descriptions.This theme is Bloggerized by Lasantha - Premiumbloggertemplates.com.
This is featured post 2 title
Replace these every slider sentences with your featured post descriptions.Go to Blogger edit html and find these sentences.Now replace these with your own descriptions.This theme is Bloggerized by Lasantha - Premiumbloggertemplates.com.
This is featured post 3 title
Replace these every slider sentences with your featured post descriptions.Go to Blogger edit html and find these sentences.Now replace these with your own descriptions.This theme is Bloggerized by Lasantha - Premiumbloggertemplates.com.
Thứ Tư, 30 tháng 12, 2009
Chủ Nhật, 27 tháng 12, 2009
15:29
nam tóc xù
The topic today is blackhat SEO, fake AV's and phishing. The culprit responsible for this boatload of maliciousness, is Eveloz (AS27716).Eveloz has 3 upstream providers, namely;AS11556 PA-CAPA2-LACNIC Cable-Wireless PanamaAS14551 ALTERNET-SA-AS UUNET TechnologiesAS23520 NEWWORLDNETWORK New World Network USA, Inc.Eveloz is also directly related to Panamaservers.com, an ISP with a history of
14:48
nam tóc xù
Just a note folks, I treat myself to a new Netgear WNR2000 N Router today (would've loved the MaxRange N router but couldn't afford it), which means the network will be unavailable later tonight, to allow for the current routers being replaced.I'm planning on doing the replacement at approx midnight tonight (GMT), and it shouldn't take more than 15 mins or so (allows for disconnection, connection
Thứ Tư, 23 tháng 12, 2009
15:36
nam tóc xù
I received an e-mail from a friend earlier, alterting me to possible malicious content over on Twitter (surprise surprise), and what I found actually did surprise me for a change.This spam run didn't lead to a worm, trojan, virus or other infection - but to an IAC website, webfetti.com.One thing they all have in common, aside from the IAC connection? Well, that would be Twivert. A site that
09:50
nam tóc xù
Those of you reading this blog for any length of time, or specializing in the documentation of malicious domains, will no doubt already be aware of RapidSwitch's history, but here's a little refresher for you;242 reasons to avoid 78.129.142.9 (RapidSwitch - AS29131)http://hphosts.blogspot.com/2008/09/242-reasons-to-avoid-781291429.htmlRapidSwitch customers still involved in SMS Fraud ......http:/
Thứ Ba, 22 tháng 12, 2009
17:26
nam tóc xù
After announcing to the world + dog, that they are offering their own version of OpenDNS, you'd have thought that meant they'd finally gotten serious about security (I know, I'm laughing at the thought too), but nope, Google's results are STILL littered with malicious content that will drive your PC into a frenzy, and drive you to a level of frustration you've never seen.As a quick example, I've
16:20
nam tóc xù
hpHosts has been and continues to be, an excellent project that I love being a part of, and although I'm glad that others find it useful, there's a certain segment that I would like to address. Given I don't know who these particular people are, I evidently can't contact them any other way, so figured a blog post would be best.Those I am referring to, are those "reviewing" and commenting on sites
08:10
nam tóc xù
This is indeed fantastic news, and a great present to Anderson, the Avant Force Team, the users that have supported Avant and Orca, and all of us lowly forum staff!As some of you may have heard the EU’s European Commision has forced Microsoft to include a ballot screen on all Windows computers running either Windows XP, Vista, or 7, you will get it through an update on Windows Update. This ballot
Thứ Bảy, 19 tháng 12, 2009
14:27
nam tóc xù
PDF exploits—mostly targeting Adobe Reader and Acrobat programs—are very commonly used on drive-by web sites. This situation is probably the result of the widespread use of the Adobe plugin, a rather large of number of vulnerabilities found in it, and reliable exploitation techniques.Two recent vulnerabilities for which I have added detection in Wepawet are CVE-2009-3459 and CVE-2009-4324 (click
08:19
nam tóc xù
Remember this and this? Well, it would appear they've had a change of heart, instead of suing me, the MD of the company, David Jones, has decided an apology is a better idea.I actually meant to post an update regarding this, a few days ago when the MD sent me the link, but I've been very side tracked with work and things, and forgot about it.Their blog doesn't mention Mr Mark Jones by name,
Thứ Sáu, 18 tháng 12, 2009
13:07
nam tóc xù
Many said Zango were dead, but myself and several others, have never considered them "dead", mainly because evidence was available to the contrary, but anyway, that's another story.I regularly check up on Google results for hpHosts as it's always proven useful in finding new malicious URL's (quite why is a mystery, but it's convenient non the less). Yesterday however, I stumbled on a couple of
11:23
nam tóc xù
Just an update folks. I'm happy to announce, after fighting with PHP for several hours (gave up, got some work done, then went to sleep), and then again for a couple hours this afternoon, the hpHosts forums and fSpamlist blog are back online.Annoyingly, in the end I had to completely rip PHP out of the server, and install an older version (i.e. the one that was working just fine and dandy until
Thứ Năm, 17 tháng 12, 2009
18:38
nam tóc xù
PHP released a new version earlier, and I thought I'd get the servers updated. Installing the new version on my development machine produced no problems, so I installed it on all of the servers that required it. All except the server that houses the hpHosts forums and fSpamlist blog, have taken to the new PHP release without issue.I've already tried rolling back to the prior version that was
Thứ Tư, 16 tháng 12, 2009
01:31
nam tóc xù
I'm happy to announce, Josh Kirkwood has just informed me that he's been successful in getting Spamhaus to SBL Riccom!http://www.spamhaus.org/sbl/sbl.lasso?query=SBL82098As of a check a couple mins ago, Riccom are still showing as unannounced, which means great news - they're still stranded!http://smakd.potaroo.net/cgi-bin/per-prefix?prefix=91.212.107.0%2F24http://cidr-report.org/cgi-bin/
Thứ Ba, 15 tháng 12, 2009
12:45
nam tóc xù
Just an update on the Cloudeight/Thundercloud issue folks. At the time of writing this, they've STILL not responded to my e-mail (asking them to what domain they were referring etc).http://hphosts.blogspot.com/2009/12/cloudeight-ever-hear-of-e-mail.htmlhttp://hphosts.blogspot.com/2009/12/thundercloudnetcloudeight-here-we-go.htmlA friend sent me a few of their newsletters, but I've not yet
05:28
nam tóc xù
I'm happy to announce, I woke up to a rather surprising e-mail today, from a Josh Kirkwood over at EuroConnex/BlueConnex. He informed me, because of this, they've booted Riccom, leaving them stranded.HelloI have read your article about us (/2009/12/blueconnexeuroconnex-as29550-riccom-ltd.html ) Firstly thanks for making such a concise list of the badness contained in that riccom /24 it was real
Thứ Hai, 14 tháng 12, 2009
05:40
nam tóc xù
Well, I'm back home for an hour (got the doctors in just over an hour too), so I've pulled the hpHosts server offline, replaced the PSU, replaced the CPU coolant, and am now defragging the data drive (the one with the hpHosts site files).The system drive was defragged over night, so if performance doesn't improve, I'm going to have to look at other options (it still needs converted over to SQL
Chủ Nhật, 13 tháng 12, 2009
16:30
nam tóc xù
The hpHosts server seems to be running alot slower than usual lately, and annoyingly, has been getting progressively worse over the past few weeks. I suspect it's due to a traffic overload, but am going to check the hardware in it as soon as I get back (I'm expecting to be back within approx 13 hours or so).The server has just been rebooted, but it's only gained a minor increase, and as such,
Thứ Sáu, 11 tháng 12, 2009
08:57
nam tóc xù
I was trying to access the Avant Browser forums earlier, and wondered why I couldn't. FTP wouldn't connect, nor would HTTP, so I tried via Web-Sniffer, to rule out a problem at this end, and nope, nothing there either.I then tried to phone HopOne, and was told I was in the position 3 of the queue, and would be speaking to someone in "2 minutes", but could check on their network status at
Thứ Năm, 10 tháng 12, 2009
17:38
nam tóc xù
Dear BlueConnex/EuroConnex, I wonder if you'd mind explaining to the ladies and gents of the internet, why you have STILL not booted Riccom? Why you continue providing connectivity for them, despite their not being a single legit domain within their IP range!.BlueConnex/EuroConnex's still providing connectivity is the reason they got a mention in the crimeware friendly ISP's listings, and sadly,
Thứ Ba, 8 tháng 12, 2009
16:11
nam tóc xù
Great News, my favourite RSS reader for the past few years, is going open source folks!.I have to say I haven’t spent a lot of time on GreatNews lately. Save the usual excuses, the most important thing is how to keep GreatNews updated regularly. I’m considering what’s the best way to release GreatNews source code. Most of the code base are safe to open, but there are small amount of code belong
Thứ Hai, 7 tháng 12, 2009
09:45
nam tóc xù
Want to own a domain name and do whatever you want? Including using it for malicious purposes - use dot.tk apparently.Nope, disgustingly, it's not a joke. Aslong as you're paying them for the domain, they apparently couldn't care less (that may not be how their e-mail to me was worded, but it's certainly what they've implied);Dear Sir/Madam, We appreciate your email. Unfortunately our policy does
07:14
nam tóc xù
It seems Mr Jones over at frontlinecom.co.uk isn't too happy with me. Not for publishing the information found concerning the spam - but for posting the footer of the e-mail (the bit with the company name, address etc etc in it).Given the information is available publicly anyway, via his own website infact, I'm confused as to what the problem is;It's okay for him to hire people he knows are going
07:04
nam tóc xù
A poster to the digitaltoast.co.uk blog concerning supportonclick.com, referenced yet another domain taking part. This time, onlinesupportforyou.com. Unfortunately this time, it is more than just a scam as this particular site, is carrying an exploit via;hxxp://kellerkamer.de/images/impressum.php> hxxp://matistuta.kampno.pl/prace/do_addcat.php>> hxxp://odenserideudstyr.dk/images/
Chủ Nhật, 6 tháng 12, 2009
15:04
nam tóc xù
Thundercloud/Cloudeight have went on another rant it seems.http://thundercloud.net/infoave/answers/2009/wot.htmI tried sending the following, but their contact form rejected it as it's over 300 chars;"Alas poor yoric ... I've just noticed yet again, that you've failed miserably in checking your facts;1. hpHosts comments on WoT are NOT posted by me. They're put there automagically when WoT syncs
Thứ Sáu, 4 tháng 12, 2009
05:58
nam tóc xù
I've just had an interesting conversation with Mark Jones over at Frontline (frontlinecom.co.uk), due to a Simon Carter (likely a fake name) spamming the hpHosts blog to advertise Frontline's website.Mark confirmed they'd hired an Indian based SEO company to market for them, and when told about spamming, said he would advise them not to spam the hpHosts blog again, but would NOT tell them to stop
Thứ Năm, 3 tháng 12, 2009
09:57
nam tóc xù
It's not uncommon for someone to e-mail me, or PM me via one of the many forums, to ask why a domain is listed, or ask for it to be removed, or even, ask for a domain to be added. Indeed, I've got 3 e-mails in my inbox at present, from 2 companies demanding their sites removed (Conduit and Ascentive) and threatening to sue me if I don't.Alas it seems, some people can't even send an e-mail. I came
08:24
nam tóc xù
hpHOSTS - UPDATED December 3rd, 2009The hpHOSTS Hosts file has been updated. There is now a total of 111,950 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! Latest Updated: 03/12/2009 13:24Last Verified: 02/12/2009 09:00Download hpHosts now!http://hosts-file.net/?s=DownloadhpHOSTS is a community managed hosts
Thứ Ba, 1 tháng 12, 2009
15:58
nam tóc xù
Following on from the SupportOnClick scam, it would appear folks, that we've got a new contender for the worlds worst scammer award.Reports are flowing online, of techonsupport.com, pulling the same scam as the folks over at supportonclick.com (other sites they're known to use are listed below. I first found out about them due to a comment over at DigitalToast.co.uk (I'd not noticed this one
15:57
nam tóc xù
Just a note folks, due to something cropping up, the hpHosts update will be out tomorrow instead of today (sorry folks).In addition, the fSpamlist server suffered corruption earlier, and sadly, rebuilding it didn't work (MySQL is playing silly buggers). As such, I've moved the site to a temporary server until I get some time tomorrow to rebuild the server from scratch.
05:26
nam tóc xù
Apologies for the latest downtime folks. Sadly the gateway died whilst I was asleep, leaving the entire network unaccessible. I've sorted that out and everything is now available again.I was also meant to have an hpHosts release out a few days ago, but due to a few things cropping up, it will be out later today instead.
Đăng ký:
Bài đăng (Atom)
