Malware Domain List

Malware Related => Tools of the trade / Internet News => Topic started by: cjeremy on April 09, 2008, 02:00:13 am

Title: New Storm Worm domains supersameas.com and boardhour.com
Post by: cjeremy on April 09, 2008, 02:00:13 am
Two new storm worm fast flux domain names were activated today by the storm worm authors: supersameas.com and boardhour.com

Another note the last domain name: superdrugtesting.com was taken off line this morning.  Look out for new spam coming with blogspot web addresses that redirect users to the new storm worm binaries: StormCodec.exe and StormCodec8.exe.

--jeremy
Title: Re: New Storm Worm domains supersameas.com and boardhour.com
Post by: bobby on April 09, 2008, 05:56:46 am
I can confirm.
4 emails has hit my spambox this morning with the link supersameas.com

btw. I can't get the binaries. Looks dead for me here.
Title: Re: New Storm Worm domains supersameas.com and boardhour.com
Post by: Edgar Bangkok on April 09, 2008, 10:47:58 am
In this moment (5.30 PM Bangkok time =  5.30 AM USA time)  supersameas.com working good
Is possible download all malware files. Stormcodec.exe stormcodec8.exe and sony.exe.

The domain superdrugtesting.com is OFFline

Edgar  :)

more info  http://edetools.blogspot.com/2008/04/storm-worm-cambia-ancora.html  (http://edetools.blogspot.com/2008/04/storm-worm-cambia-ancora.html)


Title: Re: New Storm Worm domains supersameas.com and boardhour.com
Post by: cjeremy on April 09, 2008, 02:38:48 pm
Here are the newest domain names for the fast flux network:
   1. orthelike.com - Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   2. limpodrift.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   3. gasperoblue.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   4. thingforyoutoo.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   5. loveinlive.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   6. gribontruck.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   7. giftapplys.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   8. biggetonething.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   9. newoneforyou.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
  10. supersameas.com - Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
  11. boardhour.com - Registrar: XIN NET TECHNOLOGY CORPORATION

I have more info here: http://www.sudosecure.net/archives/46