A link that was blacklisted today on malwareblacklist.com got my attention: mfacebook.co.uk The Registrant’s address is even deceiving as it seems to match the “.uk” domain: 5 East Street MANNINGTREE CO11 5YX United Kingdom In fact, browsing to that link redirects you to: which is the official mobile URL for Facebook’s site. So, is this […]
This German site (in-vogue.de) is hosting malware:in-vogue.de/Scripts/DSC000034774321.exeVirusTotal (4/43)Upon execution you might see fireworks (if you are running Process Explorer):This is poorly written malware, although whoever wrote it made sure it would run after a reboot:After execution, the malware downloads an additional component from: in-vogue.de/Scripts/update.exe (Virus Total 4/42).Also noticeable are constant pings to 92.241.168.23 (Russian IP).The IP […]
Latest Comments