Malware Domain List

Malware Related => Tools of the trade / Internet News => Topic started by: MysteryFCM on July 23, 2009, 01:13:35 pm

Title: Alliance and Leicester phishing botnet
Post by: MysteryFCM on July 23, 2009, 01:13:35 pm
Is your computer part of the Alliance and Leicester phishing botnet?

Quote
I've been seeing these for several days now, and they seem to have a new one every day or two. Thus far, I've seen 9 different domains, all pointing to Alliance & Leicester phishing scam pages - but here's the kicker - they're ALL hosted on DRONE COMPUTERS! (otherwise known as, they've all been compromised and are now part of a botnet).

http://hosts-file.net/misc/hpObserver_-_Alliance_and_Leicester_com_phishing_Scams.html

Incidentally, there only seems to be a handful of IP's involved at present, which makes it a rather small and amateurish botnet:

http://hphosts.blogspot.com/2009/07/is-your-computer-part-of-alliance-and.html