Another malicious spam run, although I don’t have a sample of the actual spam this time.. however, the payload is at [donotclick]online-gaminatore.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here), hosted on the following IPs:
89.111.177.151
203.80.16.81
78.83.233.242
These IPs have been used several times recently and should be blocked.
Leave a reply
