romania | DataProtectionCenter.com

Injection attack: malavasso.com, migraviro.com and montenegrorio.com

14

Sep

2011

Three more domains being used in injection attacks today: malavasso.com migraviro.com montenegrorio.com The payload is the Sinowal trojan. Malicious software is hosted on 95.64.45.43 which is well-known very dark grey hat host Netserv Consult SRL of Romania. Blocking 95.64.0.0/17 (95.64.0.0 – 95.64.127.255) will probably do no harm. The (possibly fake) registrant for these domains is: […]

Category Security Written by Dynamoo's Blog 0 Comments

yahoolink.php / DreamHost hack

27

Jun

2011

It appears that a lot of DreamHost (New Dream Network LLC) sites have been hacked with malicious pages added to them. The issue impacts multiple servers at different DreamHost datacenters. Some sample IPs with infected sites include:67.205.1.63 67.205.3.51 67.205.3.23069.163.168.135 69.163.169.247 69.163.181.205 69.163.184.8675.119.217.8 Given that the hacked pages all contain the string yahoolink.php then it is […]

Category Security Written by Dynamoo's Blog 0 Comments

I Don’t Use AV Because I Have a Mac

01

Jun

2011

It seems there is no let up in the recent spate of Mac malware. A few days ago, another group of domains were registered and are being used to support a fake antivirus campaign that not only targets Mac, but also Windows users. A series of sites were all registered by a Lee Juango who […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘romania’

Injection attack: malavasso.com, migraviro.com and montenegrorio.com

yahoolink.php / DreamHost hack

I Don’t Use AV Because I Have a Mac

Categories

Featured

Archives

Latest Comments

About Us

Contact Us