hpHosts: Updated 01-06-2013

The hpHOSTS Hosts file has been updated. There is now a total of 193,822 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)Latest Updated: 01/06/2013 03:00Last Verified: 01/06/2013 00:00Download hpHosts now!http://hosts-file.net/?s=Downl...

Read More

Another story of Unix Trojan: Tsunami (IRC/Bot) w/ Flooder, Backdoor at a hacked xBSD via Web Panel Attack

*) I dedicate this writing to fellow UNIX admins who dedicate an hourless hard effort for making sure our internet services up and running. #RESPECT!Snapshot: Summary Sadly, some strong waves of malware attacks on UNIX systems has started early this year. We still remember the rush from the Darkleech Rogue Apache Module, goes to Linux cDorked Rogue httpd, to the implementation of rogue web server...

Read More

A story of a Spam Botnet Cutwail Trojan - Via fake Paypal's spam link w/redirector (92.38.227.2) backboned by BHEK2 (80.78.247.227)

Infection Summary: Recently we're back into full research, and go straight to all junk mails on campaign that infecting malware. Today I bumped into the malvertisement spam email, which I thought a bit "unusual", as per below: Since some of you might see the same sample, so I thought it's worth to explain what happened, unexpectedly it lead me to a complicated analysis. Believe me, this case is worth...

Read More

Updates: Quite a few

Quite a few updates over the past few days. First and foremost, the bug with sURL is fixed.Secondly, whilst the hpHosts site is still having issues, I've modified the config to try and alleviate the issue, so it should stay up longer than it was.I've also got updates to a few programs going up over the next 72 hours or so (desperate for sleep, and my body and sleeping tablets have decided...

Read More

Misleading marketing: Uniblue + pcguide.com - but everyone's doing it!

Doing a quick search for something earlier, I stumbled upon pcguide.com, and whilst I'm now used to (but still hate) seeing security sites and support etc forums plastering ads all over the place (some even in the first and then every other, post), I still get irked when I see this kind of thing.What makes this worse, is that it's not being delivered via an ad network this time - the "adver...

Read More

ALERT: ad.yieldmanager.com, tuguu.com, nicdls.com, lastplayerfree.com, Babylon, 50.19.113.192

Investigating a piracy case earlier, I was absolutely disgusted to see the following, which shows Tuguu, owner of PPI programs such as Doma IQ, engaging in practices that are so misleading they make hackforums.net look legit.Not only does this fake flash player advert lead straight to a download that is NOT (like you didn't see that coming) Flash, but is so beyond not being flash that it...

Read More

Info: hpHosts server down

hpHosts server has been down the last couple hours or so. Aware of the problem and trying to get it resolved.Sorry for any inconvenience fol...

Read More

SparkTrust: You've still not learnt then?

Yet another instance of misleading advertising by SparkTrust was found a few minutes ago, this time via Google Adwords (surprise surprise).And the site you're pointed to, also fails miserably, to notify you that the program is NOT free, that you HAVE TO PAY FOR IT, before it'll actually do anything other than scan.You'd have thought these companies would've learnt by now, but sadly not,...

Read More

[INFO] Email server issues

Just a note folks, the incoming mail server started having issues again yesterday (incoming server is controlled by Domain Monster). Spoke to them today and they're looking into it, but in the meantime, it means I can't receive e-mai...

Read More