Three new fake job domains registered in the past couple of days to the fake “Alexey Kernel” registrant, forming part of this very long running scam.unionhire.netwugcareer.comwugoffers.netAs before, there is a series of spam messages advertising so-called “jobs” from these companies, but in reality they are criminal activities such as money laundering.
reddingtaxcm.com is a legitimate domain that is registered at GoDaddy and has been hijacked to serve up malware, hosted on 95.168.177.144 (NetDirekt, Germany but more below..).The malware appears to be a variant of Vundo / Virtumundo, the infection mechanism looks to be some sort of injection attack on third party sites.Although the IP 95.168.177.144 is […]
I don’t quite have the full picture on this, but it looks like some Scandinavian sites have been compromised in some way and are redirecting to a malware server on 79.133.196.124 in Poland which is serving up fake AV applications.Blocking access to 79.133.196.124 is probably a very good idea. The following sites appear to be […]
Latest Comments