Microsoft SysInternals update

Hat tip to the guys at the ISC for the heads up (got the Microsoft RSS on the reader but didn't notice this one).We have received notification that Sysinternals has had some updates. One in particular that is a favorite among handlers is Process Explorer. It now includes: Process Explorer v14.11 includes the ability to configure network and disk activity icons in the tray. Check out the

Read More

Fake AVs: Back to using Instra Corporation Pty Ltd

Seems the fake AV gang responsible for these campaigns, have gone from Tucows, back to Instra Corp again. This lot were first created March 24th, and are now being used yet again;

Read More

Tucows + Fake AV + new (but old) /24

It was bound the happen, after having their IPs killed a few days ago, and I'm actually surprised it took them this long, but alas as of the 28th, there's yet more malicious fake AV domains via Tucows (wonder if Tucows are actually going to put a stop to this?).

Read More

Have a router with wireless? Have it secured yet?

Many have been bleating on about securing WiFi pretty much since WiFi was first available to the masses, but many still don't bother securing it, leaving them wide open to abuse at best, and at worst, being prosecuted because someone used YOUR unsecured wireless connection, to download child pornography.A case has been brought to light yet again, of a man prosecuted because a neighbour used his

Read More

Success!: Fake AVs at CaroNet (AS11368)

I am pleased to report, with the help of my friend William (GoDaddy), every single one of the following, has had their IPs suspended by CaroNet (better late than never). I fully expect them to move to new IPs, but in the meantime, it's ~500 sites less, that can infect its

Read More

hpHOSTS - Updated April 2011

hpHOSTS - Updated April 2011The hpHOSTS Hosts file has been updated. There is now a total of 122,034 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)Latest Updated: 20/04/2011 03:00Last Verified: 20/04/2011 01:00Download hpHosts now!http://hosts-file.net/?s=Download

Read More

Take downs: The good, the bad - and RapidSwitch

Taking down malicious sites has been part of daily life for years now, and I still love every second of it. Primarily because it annoys the bad guys, but mostly because it means there's less malicious sites (for a second anyway) for people to get infected via.During the years, there's been many changes in the responses from hosting companies and registrars. GoDaddy have become one of the best at

Read More