Another malware campaign using the goo.gl redirector leading to a malicious payload, this time on 66.151.138.87. From: OP 25939760 Y [email protected] To: [email protected] Date: 15 March 2012 08:35 Subject: LinkedIn Corporation account on Hold Ref78087257 Signed by: yahoo.com Case?99-4582982-70209467-8-373 < !–PZ 62188868 V http://goo.gl/FP84h XR 28309138 C The goo.gl redirector goes to shfd19za.roversmolina.ru (multihomed, see […]
Another case of the goo.gl redirector being used for evil: From: Dilip Lalita [email protected] Date: 14 March 2012 09:38 Subject: Changes in FDIC policy #22666447 Signed by: yahoo.com Id 36-4866333-96425034-8-662 < !–KG 19021150 K http://goo.gl/NEQlS HF 22555007 Z goo.gl/NEQlS leads to m6ttp.burdencrigyll.ru (multihomed, see below) and then to a malicious payload site at 64.150.166.50/showthread.php?t=72d268be707a5fb7 (iPower, […]
Latest Comments