Three more domains being used in injection attacks today: malavasso.com migraviro.com montenegrorio.com The payload is the Sinowal trojan. Malicious software is hosted on 95.64.45.43 which is well-known very dark grey hat host Netserv Consult SRL of Romania. Blocking 95.64.0.0/17 (95.64.0.0 – 95.64.127.255) will probably do no harm. The (possibly fake) registrant for these domains is: […]
Category Security
0 Comments
Latest Comments