registrant | DataProtectionCenter.com

Fake mobile Facebook site blocks AntiVirus products

23

Sep

2011

A link that was blacklisted today on malwareblacklist.com got my attention: mfacebook.co.uk The Registrant’s address is even deceiving as it seems to match the “.uk” domain: 5 East Street MANNINGTREE CO11 5YX United Kingdom In fact, browsing to that link redirects you to: which is the official mobile URL for Facebook’s site. So, is this […]

Category Security Written by Malware Diaries 0 Comments

Injection attack: malavasso.com, migraviro.com and montenegrorio.com

14

Sep

2011

Three more domains being used in injection attacks today: malavasso.com migraviro.com montenegrorio.com The payload is the Sinowal trojan. Malicious software is hosted on 95.64.45.43 which is well-known very dark grey hat host Netserv Consult SRL of Romania. Blocking 95.64.0.0/17 (95.64.0.0 – 95.64.127.255) will probably do no harm. The (possibly fake) registrant for these domains is: […]

Category Security Written by Dynamoo's Blog 0 Comments

Fake AV network: a new home (Part 7)

02

Sep

2011

After a brief return to life using Impulso‘s DNS services, our bad guys (80.91.176.192) switched to a different provider: publicvm.com However, at the time of writing this post, I got a 404 page when redirected from ‘redspacetube.com‘. There’s nothing like a good game of cat and mouse In the meantime, let’s have a look at […]

Category Security Written by Malware Diaries 0 Comments

The Latest in IT Security

Posts Tagged ‘registrant’

Fake mobile Facebook site blocks AntiVirus products

Injection attack: malavasso.com, migraviro.com and montenegrorio.com

Fake AV network: a new home (Part 7)

Categories

Featured

Archives

Latest Comments

About Us

Contact Us