ukraine | DataProtectionCenter.com

c*redret.ru sites to block

12

Dec

2011

Another bunch of “redret” sites to block, either by domain name or IP. These domains are being used as the payloads for spam emails and leave to a malicious web page. 79.137.237.63 (Digital Network JSC aka DINETHOSTING, Russia – recommend blocking 79.137.224.0/20) crredret.ru ctredret.ru czredret.ru 79.137.237.67 ((Digital Network JSC again) ciredret.ru coredret.ru cpredret.ru 91.195.11.42 (UkrStar ISP, Ukraine – recommend blocking […]

Category Security Written by Dynamoo's Blog 0 Comments

Malware: “Your new contract” / coredret.ru

08

Dec

2011

Spam season continues with this fake “contract” email with a link that leads to a malicious payload on coredret.ru/main.php. Date: Thu, 8 Dec 2011 01:58:25 +0700 From: “Daisy Newby” [CadenHolmgren@hanmail.net] Subject: Your new contract As we arranged the day before yesterday in the in your place we’ve got the contract ready, plase […]

Category Security Written by Dynamoo's Blog 0 Comments

Something evil on 91.220.35.38

07

Oct

2011

91.220.35.38 contains several malicious domains, apparently connected with the Blackhole Exploit Kit. These sites are being promoted through spam email. The IP range of 91.220.35.0/24 (zamanhost.ru who appear to operate out of the Ukraine) looks like a good thing to block. The email looks something like this: Subject: Re: FW: End of Aug. Statement Reqiured […]

Category Security Written by Dynamoo's Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘ukraine’

c*redret.ru sites to block

Malware: “Your new contract” / coredret.ru

Something evil on 91.220.35.38

Categories

Featured

Archives

Latest Comments

About Us

Contact Us