RSS Feed
Twitter
Following an article I wrote recently for SC Magazine, Martijn Grooten of Virus Bulletin, who shares my interest in and dislike of support desk scams, contacted me about the web site associated with eFIX, a company claiming to offer online technical support. He and I, along with Steven Burn, who has a great deal of experience of working in this area, have been able to dig out some interesting
This is featured post 1 title
Replace these every slider sentences with your featured post descriptions.Go to Blogger edit html and find these sentences.Now replace these with your own descriptions.This theme is Bloggerized by Lasantha - Premiumbloggertemplates.com.
This is featured post 2 title
Replace these every slider sentences with your featured post descriptions.Go to Blogger edit html and find these sentences.Now replace these with your own descriptions.This theme is Bloggerized by Lasantha - Premiumbloggertemplates.com.
This is featured post 3 title
Replace these every slider sentences with your featured post descriptions.Go to Blogger edit html and find these sentences.Now replace these with your own descriptions.This theme is Bloggerized by Lasantha - Premiumbloggertemplates.com.
Thứ Tư, 9 tháng 11, 2011
Thứ Ba, 1 tháng 11, 2011
17:26
nam tóc xù
Look at the image on the left. See anything that shouldn't be there?I'll give you a hint - it's got a black background.I identified this whilst doing a routine enquiry on an IP housing a plethora of fake meds sites. I dropped a note to the sites owner and registrar, who informed me it most definitely should NOT be there.The content in question, is;
Thứ Ba, 18 tháng 10, 2011
17:32
nam tóc xù
I received 4 spam e-mails earlier that housed 4 links pointing to zip files on 4 sites housed on rZone.de (Cronon) IP space - all of the files contain trojans - more on that later.As I normally do, I tried dropping the address listed in the net-block info an e-mail (cmueller@cronon.net and abuse@cronon.net), sadly it seems they don't want to receive abuse reports;Mail delivery to the following
Thứ Hai, 10 tháng 10, 2011
22:42
nam tóc xù
From my friend Conrad;The following IPs are related to the TDL/TDSS rootkit. 212.36.9.52 / gic-kbmtu0zkvwylf.com appears to be a C&C server. 94.63.149.1094.63.149.1194.63.149.1294.63.149.1394.63.149.1494.63.149.15146.185.250.140146.185.250.141195.3.145.251195.3.145.252195.3.145.253212.36.9.5294.63.149.0/24 is a Romanian host called Eurolan Solutions SRL, I've had this blocked for months with no
Thứ Bảy, 8 tháng 10, 2011
19:10
nam tóc xù
microsoft-key.com was registered through the well known criminal friendly, BIZCN on October 7th (key-microsoft.com existed previously, same IP range), and not surprisingly, is up to no good. The domain is presently only in German for some reason (auto-redirs to /de-DE/, and no other language dirs seem to exist).A translation via Google, since I don't speak German, shows;Welcome to the Microsoft
Đăng ký:
Bài đăng (Atom)
