Author Topic: - New Koobface C&C?  (Read 3140 times)

0 Members and 1 Guest are viewing this topic.

December 11, 2010, 06:00:53 pm
Read 3140 times


  • Jr. Member

  • Offline
  • **

  • 14
This week I found some hacked FTP accounts where Koobface pages were uploaded. 2 php scripts where only used to connect to a server and check for an answer. You can see the contents of one on the files on

As you can see, the script connects to This IP number is also used to retrieve stats from the Koobface pages. The IP range is blocked by Spamhaus,

Has anyone else seen activity from this IP number? If you are interested in the uploaded files, please PM me.

While investigating I found some more Koobface pages: