isp | DataProtectionCenter.com – Tech and Security

c*redret.ru sites to block

12

Dec

2011

Another bunch of “redret” sites to block, either by domain name or IP. These domains are being used as the payloads for spam emails and leave to a malicious web page. 79.137.237.63 (Digital Network JSC aka DINETHOSTING, Russia – recommend blocking 79.137.224.0/20) crredret.ru ctredret.ru czredret.ru 79.137.237.67 ((Digital Network JSC again) ciredret.ru coredret.ru cpredret.ru 91.195.11.42 (UkrStar ISP, Ukraine – recommend blocking […]

Category Security Written by Dynamoo's Blog 0 Comments

Malware: “Your new contract” / coredret.ru

08

Dec

2011

Spam season continues with this fake “contract” email with a link that leads to a malicious payload on coredret.ru/main.php. Date: Thu, 8 Dec 2011 01:58:25 +0700 From: “Daisy Newby” [CadenHolmgren@hanmail.net] Subject: Your new contract As we arranged the day before yesterday in the in your place we’ve got the contract ready, plase […]

Category Security Written by Dynamoo's Blog 0 Comments

The Mystery of Duqu: Part Six (The Command and Control servers)

30

Nov

2011

Over the past few weeks, we have been busy researching the Command and Control infrastructure used by Duqu. It is now a well-known fact that the original Duqu samples were using a C&C server in India, located at an ISP called Webwerks. Since then, another Duqu C&C server has been discovered which was hosted on […]

Category General Written by Securelist / Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘isp’

c*redret.ru sites to block

Malware: “Your new contract” / coredret.ru

The Mystery of Duqu: Part Six (The Command and Control servers)

Categories

Featured

Archives

Latest Comments

About Us

Contact Us