Recent Posts

61

Malicious Domains / Re: AppleID Phishing

« Last post by BenENichols on February 25, 2016, 07:53:27 am »

The same domain is hosting a PaYPAL pHISHER

http://vc-hosting.co.uk/.fadhel/secure/hell/upd/e72eaac71307aee58ce9f86a27bcf73c/ok/hss/


Just blacklist the entire frigging domain.

Code: [Select]

.vc-hosting.co.uk

62

Malicious Domains / Re: Paypal Phishing

« Last post by BenENichols on February 25, 2016, 07:42:54 am »

Bravo gentlemen, Bravo!

63

Malicious Domains / ELF Infected Hosts from @MalwareMustDie and @Squidblacklist

« Last post by BenENichols on February 25, 2016, 07:39:39 am »

Sup,

I am the owner of Squidblacklist.org and I thought I might stop by here and share a recent dump from our good friend @Malwaremustdie of ELF infected hosts. After a brief exchange of info on twitter. https://twitter.com/nullandnull/status/702173911895519232

http://www.squidblacklist.org/downloads/65776543735464.txt

Code: [Select]

.10bnct.ru
.3gshoptshirt.com
.asiafacility.com
.australiandesignerweddings.com
.bwasog.com
.care2kids.org
.catifiyat.com
.chaudierefioul.com
.chinaqcinspection.com
.coaetonixsystems.com
.comgwtfnews.com
.conautiquesunique.com
.cornerstonefunding.net
.cursosapuestas.com
.cylooks.com
.danidassoy.com
.dennisnapper.com
.divorcelawbf.com
.ecba.biz
.emiliegriffin.com
.energieee.com
.etechlounge.com
.fashionstreaks.com
.firsatikovala.com
.howtheyrank.com
.hyfcj.com
.ifmedia.ru
.ifstusa.org
.imagesoncamera.com
.kcchiefsblog.com
.klingenberg.it
.lexdesign.net
.lingerieconcierge.com
.medkrdnz.com
.mtool.by
.narryhotelpatong.com
.northmacarthur.com
.nowontheclock.com
.phspring.net
.quan100.net
.relianceclouds.com
.cobuglas.com
.sadquotesaboutlove.com
.sayin-yapi.com
.singhsumit.com
.smartpenthousebangkok.com
.solmevini.com
.swfldawgpound.com
.tg-technologies.com
.thesocialsme.com
.thethinkingdog.com
.thienthaohotel.com
.vinabuhmwoo.com
.wagzpetsalon.com
.xinchunge.com
.zagora-online.com
.zahiracollege.net
Blacklist Em!

Signed,
Benjamin E. Nichols
http://www.squidblacklist.org

64

Malicious Domains / Re: AppleID Phishing

« Last post by InfectedPacket on February 23, 2016, 12:14:53 am »

http://ed.msk.ru/administrator/language/en-GB/apl/        AppleID phishing
http://www.topperszone.com/Comfortproks.com/fwdcomfortprowebsite/applesecurity/UpdateYourInformation/appl/          AppleID phishing

65

Malicious Domains / Site mirroring news aggregator, spreading malware.

« Last post by ohblindone on February 01, 2016, 05:57:10 pm »

new-2016.ga is a complete copy of a popular news aggregation site Voat.co.

It is mirroring all the content on Voat.co and throwing in popup ads and spreading malware. Just going to the site will get one redirected to many different sites and open different windows in one's browser.

Beware and never follow a link to the site.

66

Malicious Domains / Re: Paypal Phishing

« Last post by boneco69 on February 01, 2016, 02:38:08 pm »

Another...

hxxp://secure-info-account.com/Help/myaccount/summary/Login.php

67

Malicious Domains / Santander (bank) false email with phishing - another one...

« Last post by boneco69 on February 01, 2016, 02:25:48 pm »

Ok, today received another email, linked to same domain but another hostname...

 ->  hxxps://actualizacaomontepi1.websiteseguro.com/ <--

I had already add *.webseguro.com to my network DNS server (Linux gateway with DNS caching and blacklisting).

68

Malicious Domains / AppleID Phishing

« Last post by InfectedPacket on January 30, 2016, 06:41:20 pm »

http://secure.sa.fe.he.lp.cen.ter.home.sim.ple.up.da.te.now.please.vc-hosting.co.uk/home/uri/ Apple ID Phishing

69

Malicious Domains / Santander (bank) false email with phishing.

« Last post by boneco69 on January 30, 2016, 11:40:28 am »

Estimado Cliente,

Informamos que desde o dia 26 de janeiro de 2016, o servico Net24 actualizou e para garantir que aceda ao servico Net24 sera obrigatorio que confirme a activação de Cartão de Matriz.

Caso não seja activado, você não terá acesso aos serviços Net24 e o mesmo serão bloqueado por motivos de segurança.

A activação de Cartão de Matriz é indispensável para evitar fraudes e garantir sua segurança e comodidade.
Dados Activação

1.   Utilizador

2.   Código PIN Montepio24

3.   Cartão de Matriz

Em caso de dificuldade, contacte-nos através do Phone24, pelo telefone 707 20 20 24 (atendimento personalizado das 7:00 à 1:00). Do Estrangeiro ligue +351 21 724 16 24.



Melhores cumprimentos,
Atendimento ao Cliente Montepio S.A.

www.montepio.pt --> links to false site hxxps://actualizacaomontepio.websiteseguro.com/  (https changed to prevent users clicks)

Best regards.

70

Malicious Domains / Re: soundclou.com - dangerous exploit installer/typosquatter

« Last post by Malvertiser on January 29, 2016, 04:59:14 pm »

Hmmm... This (hxxp://soundclou.com) redirected me to a Browlock.fakeTechSupport with the following message:

"Important security message. Please dial the number provided ASAP. You will be guided for the removal of the adware/spyware virus on your computer..."

Blah blah blah.
No exploit seems to be hosted on this site.

The other url posted here is currently offline.