Recent Posts

21

Malicious Domains / chilkaa.tk

« Last post by lmaze797 on January 11, 2017, 07:09:13 pm »

Found this through a redirecting site. Locks up screen and claims that your computer has been infected with a Trojan virus. Tells you to call a fake I.T support number. I have no idea if this website leaves anything on your computer.

22

Malicious Domains / Please remove hausnet.ru from the list. The data is irrelevant,this site is safe

« Last post by Rainman on December 24, 2016, 11:50:32 am »

Hello!

Please remove www.hausnet.ru from the list. Cause: The data is irrelevant, this site is safe.

It is the site of a small communication operator (ISP). Secure site, nothing malicious there!

P.S. http://www.hausnet.ru/about/contacts/

23

Malicious Domains / bassco.com

« Last post by semiliterate on November 28, 2016, 06:22:01 am »

A while back a plumber looking for shower door specs blithely took a relative's browser here. It's more likely aimed to get traffic from "basco.com" (single 's'), Briggs and Stratton, or looking again, maybe this aviation corp. bassco.

Anyway, symptoms were: claiming the ISP had blocked our IP address (No), locking up the immediate browser window (chrome), generally complaining and fishing for information. That's all. Hoped this was the right place!

24

Malicious Domains / Fake Chrome "urgent update!" page

« Last post by molan1998oif on October 29, 2016, 08:00:05 pm »

kookefinavia.net
The above is the domain of a fake update page.  After the .net was a series of random junk (or seemingly random), which I failed to copy/paste, but I was just focusing on the root part... Brain not functional today, busy with other stuff.

25

Site / Forum Discussion / Re: PREVENT RANSOMWARE WITH THIS FREE OUTLOOK ADDIN

« Last post by dlipman on October 24, 2016, 05:06:29 pm »

Email associated with ransomware is not "infected".

To be infected one would have to have a legitimate email that, at some point, malware has been injected into it.

Email associated with ransomware is designed to be malicious from its origins.  It use a Social Engineering ploy and an attachment that downloads and executes a crypto trojan.

26

Malware Analysis / Banking trojan

« Last post by emmyslim on October 24, 2016, 05:27:39 am »

Hello please can some help me here i need a banking trojan thanks

27

Site / Forum Discussion / PREVENT RANSOMWARE WITH THIS FREE OUTLOOK ADDIN

« Last post by RansomSaver on October 20, 2016, 05:33:50 pm »

Hi everyone!

Out of necessity to cover our own needs and protect our clients we created an application called RansomSaver, it is an Outlook add-in and basically what it does is moves new incoming infected email to a folder under the deleted items called RansomSaver. We provide this software for free and with no strings attached.

RansomSaver has been tested by KASPERSKY LAB using several industry-leading security solutions and found to be completely clean of adware/spyware components, also SOFTPEDIA has branded our application as trusted.
To download or see further information regarding RansomSaver please visit

http://synergy-usa-llc.com/ransomsaver-overview.html

28

Malicious Domains / Malfunction scare attempt - fake tech support

« Last post by molan1998oif on October 11, 2016, 06:05:20 am »

Found this gem, forwarded to me today.
Link begins with the following domain:
virus-crash-i8m8yf.tech
The rest of the link can be seen in the screenshot I'm attaching.

Only things I blacked out was our IP address.

Quite glad our users are not falling for these lame attempts, but I'm making sure they are aware of these.

29

Tools of the trade / Internet News / Load malware domains easy

« Last post by camp0 on October 08, 2016, 08:34:52 pm »

Hi All,

Here is a small script in python for detect malware domains
Hope will be usefull

L

30

Tools of the trade / Internet News / Re: Mikrotik RouterOS .rsc Blacklist Import script ( Dshield & Spamhaus Combined)

« Last post by camp0 on October 08, 2016, 01:26:41 pm »

Hi,

Do you have FP/FN results for that ip lists? I was wondering if some of them are part of amazonws or other cloud services, so the IP aproach will be weak.
Anyway, good job!

L