payload | DataProtectionCenter.com

Intuit spam / sony-zeus.net

07

Mar

2012

Another fake INTUIT spam run is in progress, this time using the domain sony-zeus.net to deliver the payload. The malware is hosted on sony-zeus.net/content/ap2.php?f=ef572 and sony-zeus.net/main.php?page=fac4e861546108ef on 213.179.193.132 (Solidhost, Netherlands). We’ve seen this IP before, so it is well worth blocking.

Category Security Written by Dynamoo's Blog 0 Comments

Dangerous Backdoor – UTF8GAT.PHP

02

Mar

2012

There is a very prominent backdoor being used extensively across a lot of the sites we are working on these days. This backdoor is giving the attacker[s] full control of your server. File to be on the look out for: utf8gat.php Once in your environment, it’s replicated and being embedded deep within your file directories […]

Category Security Written by Sucuri 0 Comments

“Your tax appeal status” / “Your Intuit.com software order” spam and trucktumble.com

01

Mar

2012

Two different spams with the same payload, the first featuring a massive failure of competency: Date: Thu, 1 Mar 2012 18:34:39 +0300 From: “INTUIT INC.” Subject: Your Intuit.com software order. dear {l1}: thank you for {l2} intuit market. we {l3} and will {l4} when your {l5}. if you ordered {l6} items, we […]

Category Security Written by Dynamoo's Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘payload’

Intuit spam / sony-zeus.net

Dangerous Backdoor – UTF8GAT.PHP

“Your tax appeal status” / “Your Intuit.com software order” spam and trucktumble.com

Categories

Featured

Archives

Latest Comments

About Us

Contact Us