Another AICPA spam run is also doing the rounds with a malicious payload on: themeparkoupons.net/main.php?page=89cd1f8b9fb67fbc themeparkoupons.net/content/ap2.php?f=4f07a The IP appears to be 41.64.21.71 (Dynamic ADSL, Egypt). This IP has been seen many times before, so blocking it would be a very good idea.
The past couple of days have seen a lot of identical “Intuit.com” spam runs. Another one is starting up today with a malicious payload on migdaliasbistro.net hosted on 213.179.193.132 (Solidhost, Netherlands) and 41.64.21.71 (Dynamic ADSL, Egypt) In particular, malware can be found at: migdaliasbistro.net/main.php?page=4f7249b62ef4f934 migdaliasbistro.net/content/ap2.php?f=86cd2 There’s a Wepawet report here. There are several potentially malicious […]
Latest Comments