Author Topic: Alliance and Leicester phishing botnet  (Read 1966 times)

0 Members and 1 Guest are viewing this topic.

July 23, 2009, 01:13:35 pm
Read 1966 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Is your computer part of the Alliance and Leicester phishing botnet?

Quote
I've been seeing these for several days now, and they seem to have a new one every day or two. Thus far, I've seen 9 different domains, all pointing to Alliance & Leicester phishing scam pages - but here's the kicker - they're ALL hosted on DRONE COMPUTERS! (otherwise known as, they've all been compromised and are now part of a botnet).

http://hosts-file.net/misc/hpObserver_-_Alliance_and_Leicester_com_phishing_Scams.html

Incidentally, there only seems to be a handful of IP's involved at present, which makes it a rather small and amateurish botnet:

http://hphosts.blogspot.com/2009/07/is-your-computer-part-of-alliance-and.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net