I haven’t had much time to analyse this yet, but there seems to be some sort of injection attack using the domain partyysoon.info. It may be targeting sites in Sweden. Malicious URLs (don’t click these, obviously): hxxp:||partyysoon.info/index.php hxxp:||partyysoon.info/js_pa/F.class hxxp:||partyysoon.info/Set.jar hxxp:||gotchasworkspaces.in/duquduqu1/font.php hxxp:||beards.christianmomsgetaways.com/index.php?p=b2e04035f7b91e43 These IPs and domains are all related to the attack: 5.10.65.142 (Spinor J Ltd […]