Author Topic: New Storm Worm domains supersameas.com and boardhour.com  (Read 4271 times)

0 Members and 1 Guest are viewing this topic.

April 09, 2008, 02:00:13 am
Read 4271 times

cjeremy

  • Special Members
  • Full Member

  • Offline
  • *

  • 58
    • sudosecure
Two new storm worm fast flux domain names were activated today by the storm worm authors: supersameas.com and boardhour.com

Another note the last domain name: superdrugtesting.com was taken off line this morning.  Look out for new spam coming with blogspot web addresses that redirect users to the new storm worm binaries: StormCodec.exe and StormCodec8.exe.

--jeremy

April 09, 2008, 05:56:46 am
Reply #1

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
I can confirm.
4 emails has hit my spambox this morning with the link supersameas.com

btw. I can't get the binaries. Looks dead for me here.

April 09, 2008, 10:47:58 am
Reply #2

Edgar Bangkok

  • Special Members
  • Full Member

  • Offline
  • *

  • 61
    • Edgar Internet Tools
In this moment (5.30 PM Bangkok time =  5.30 AM USA time)  supersameas.com working good
Is possible download all malware files. Stormcodec.exe stormcodec8.exe and sony.exe.

The domain superdrugtesting.com is OFFline

Edgar  :)

more info http://edetools.blogspot.com/2008/04/storm-worm-cambia-ancora.html



April 09, 2008, 02:38:48 pm
Reply #3

cjeremy

  • Special Members
  • Full Member

  • Offline
  • *

  • 58
    • sudosecure
Here are the newest domain names for the fast flux network:
   1. orthelike.com - Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   2. limpodrift.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   3. gasperoblue.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   4. thingforyoutoo.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   5. loveinlive.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   6. gribontruck.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   7. giftapplys.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   8. biggetonething.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   9. newoneforyou.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
  10. supersameas.com - Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
  11. boardhour.com - Registrar: XIN NET TECHNOLOGY CORPORATION

I have more info here: http://www.sudosecure.net/archives/46