Late last week, we found evidence of a possible link between a Mac OS X backdoor trojan and an APT attack known as LuckyCat. The IP address of the C&C to which this bot connects (199.192.152.*) was also used in other Windows malware samples during 2011, which made us believe we were looking at the […]
Yet more BBB spam, this time with a different malicious domain – curvechirp.com, hosted on 184.171.248.47 at TMZHosting LLC, Florida. This range is suballocated from Hostdime and has been seen a few days ago with another attack, so blocking all access to 184.171.248.32/27 is probably prudent. Payload page is at curvechirp.com/main.php?page=111d937ec38dd17e, at the moment the […]
Here are some more fake sites pretending to be the Bundeskriminalamt and Bundespolizei (agencies of the German Federal Police) which are probably worth blocking, following on from these. 193.105.240.204 [Sia Vps Hosting, Latvia] bundespolizei-de.net bundespolizei-de.org bundespolizei-online.com dpolg-bundespolizei.org inter-bundeskriminalamt.org 77.87.229.14 [Invalid pointer to bundespolizei.de] inter-bundeskriminalamt.eu dpolg-bundespolizei.org [also on 193.105.240.204] inter-bundeskriminalamt.org [also on 193.105.240.204] 211.154.153.49 [China Motion […]
Latest Comments