Posts Tagged ‘subdomain’

Russian Odnoklassniki spamming

Oct

2012

Recently, we’ve noticed that there are too many legitimate domains popping up in our url filters with malware. At first we thought we had a huge false-positive (FP) problem, but after analysis we found a pattern. All of the referring links came from the Russian Odnoklassniki server, which is a quite-popular Russian social network. Users […]

Category General Written by Avast! blog 0 Comments

Something evil on 82.211.45.81 and 82.211.45.82

Apr

2012

82.211.45.81 (Accelerated IT Services GmbH, Germany) is another server with a bunch of subdomains of hacked GoDaddy accounts, apparently being used to deliver payloads from other sites that have a hacked .htaccess file. 82.211.45.0/24 doesn’t appear to host anything at all apart from these malicious sites and is a good candidate to block. The hacked […]

Category Security Written by Dynamoo's Blog 0 Comments

Dutch Users Served SINOWAL for Lunch

Mar

2012

Dutch users were recently targeted in a website compromise that involved a popular news site in the Netherlands, nu.nl. The site was compromised and modified to load a malicious iframe that resulted to visitors’ systems being infected with a SINOWAL variant. Trend Micro researcher Feike Hacquebord says that considering the different characteristics of this attack, […]

Category General Written by TrendLabs 0 Comments

The Latest in IT Security

Posts Tagged ‘subdomain’

Russian Odnoklassniki spamming

Something evil on 82.211.45.81 and 82.211.45.82

Dutch Users Served SINOWAL for Lunch

Categories

Featured

Archives

Latest Comments

About Us

Contact Us