freac.net is a domain used by malicious spam email pretending to be from the BBB or NACHA, as in this example. In that case, freac.net was apparently hosted on an IP belonging to Huawei in the US, but shortly afterwards it went non-resolving. Well, freac.net is back and so is the spam promoting it.. e.g. […]
More fake BBB spam leading to a malicious payload, this time hosted on the domain sulusize.com on 174.136.4.211 (Colo4, US). The server appears to be a legitimate hacked server, but blocking traffic to that IP is probably a wise idea if you can do it. Some sample emails (the usual fake BBB approach): Date: […]
A couple of BBB spams, both leading to malware on different domains on the same IP of 78.129.132.82 (Rapidswitch / Iomart Hosting, UK). Example 1: Date: Thu, 18 Jan 2012 10:24:33 +0000 From: “Better Business Bureau” Subject: Urgent information from BBB Attachments: betterbb_logo.jpg Attn: Owner/Manager Here with the Better Business Bureau […]
Latest Comments