We are seeing many sites compromised with malware from jjghui.com/urchin.js. Most of them are IIS/ASP sites and the infection method seems to be similar to the Lizamoon mass infections from a few months ago (SQL injection). According to Google, almost 1.5k sites have been blacklisted already due to it, and there are 80k+ pages on […]
Thousands of sites are currently being hit by an injection attack pointing to dfrgcc.com/ur.php a domain registered to someone using the infamous hotmailbox.com domain for email. JamesNorthone James Northone [email protected] +1.5168222749 fax: +1.5168222749 128 Lynn Court Plainview NY 11803 us The site is hosted on 188.229.88.103 which is the […]
The crew responsible for the LizaMoon and Worid-Of-Books.com are back with a new set of injection attacks, this time hosted on 94.244.80.7 in Lithuania. The following domains are currently in use: bookaros.com bookarra.com bookavio.com bookdolo.com bookfula.com bookgusa.com bookmonn.com bookmono.com bookmylo.com booknunu.com bookpolo.com booksgou.com booksoco.com booksolo.com booktuba.com bookvila.com bookvivi.com bookvoxy.com bookzoul.com bookzula.com Registrant details are familiar […]
Latest Comments