ips | DataProtectionCenter.com – Tech and Security

“Your Flight Order ?994284” / saprolaunimaxim.ru

12

Jun

2012

This fake flight email leads to malware on saprolaunimaxim.ru. From: Simonne Storey [sandy@krishermckay.com] Subject: Your Flight Order ?994284 Dear Customer, FLIGHT NUMBER A45-342 DATE & TIME / JUNE 27, 2012, 10:140 PM ARRIVING: NEW YORK JFK TOTAL PRICE : 456.62 USD Please download and print out your ticket here: DOWNLOAD Amercian Airlines{br[1-5]} The link hoes […]

Category Security Written by Dynamoo's Blog 0 Comments

partyysoon.info injection attack in progress

12

Jun

2012

I haven’t had much time to analyse this yet, but there seems to be some sort of injection attack using the domain partyysoon.info. It may be targeting sites in Sweden. Malicious URLs (don’t click these, obviously): hxxp:||partyysoon.info/index.php hxxp:||partyysoon.info/js_pa/F.class hxxp:||partyysoon.info/Set.jar hxxp:||gotchasworkspaces.in/duquduqu1/font.php hxxp:||beards.christianmomsgetaways.com/index.php?p=b2e04035f7b91e43 These IPs and domains are all related to the attack: 5.10.65.142 (Spinor J Ltd […]

Category Security Written by Dynamoo's Blog 0 Comments

Bank phishing malware bypasses DNS to trick the web browser

30

May

2012

by Dave Michmerhuizen & Luis Chapetti – Security Researchers Bank phishing is a world-wide problem, but nowhere is it more widespread or sophisticated than in Latin America. Consumers throughout the Southern Hemisphere are constantly bombarded by web links and spam attachments which present convincing displays that aim to steal usernames, passwords and other authentication tokens. […]

Category General Written by The Barracuda Labs Internet Security Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘ips’

“Your Flight Order ?994284” / saprolaunimaxim.ru

partyysoon.info injection attack in progress

Bank phishing malware bypasses DNS to trick the web browser

Categories

Featured

Archives

Latest Comments

About Us

Contact Us