Facebook botnet

[MysteryFCM]

Following on from the FB botnet blog, the following are a few more, and also show the same botnet, is also responsible for the IRS rubbish

Code: [Select]

http://irs.gov.hyffvsr.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsz.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsa.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsf.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsb.be/fraud_application/directory/statement.php
http://irs.gov.ferdasxs.be/fraud_application/directory/statement.php
http://irs.gov.de11dke.be/fraud_application/directory/statement.php
http://irs.gov.hyffvss.be//fraud_application/directory/statement.php
http://irs.gov.kiooojn.be/fraud_application/directory/statement.php
http://irs.gov.kiooojq.be/fraud_application/directory/statement.php
http://irs.gov.kiooojx.be/fraud_application/directory/statement.php
http://irs.gov.kiooojv.be/fraud_application/directory/statement.php
http://irs.gov.kiooojz.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsr.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsz.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsa.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsf.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsb.be/fraud_application/directory/tax-statement.exe
http://irs.gov.ferdasxs.be/fraud_application/directory/tax-statement.exe
http://irs.gov.de11dke.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvss.be//fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojn.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojq.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojx.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojv.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojz.be/fraud_application/directory/tax-statement.exe
http://www.facebook.com.kiooojn.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojq.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojx.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojv.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojz.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojn.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojq.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojx.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojv.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojz.be/usersdirectory/updatetool.exe

[MysteryFCM]

Forgot the validation results, hehe.