Malware Domain List

Malware Related => Malicious Domains => Topic started by: MysteryFCM on November 27, 2009, 12:00:55 am

Title: Facebook botnet
Post by: MysteryFCM on November 27, 2009, 12:00:55 am
Following on from the FB botnet blog, the following are a few more, and also show the same botnet, is also responsible for the IRS rubbish ;)

Code: [Select]
http://irs.gov.hyffvsr.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsz.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsa.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsf.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsb.be/fraud_application/directory/statement.php
http://irs.gov.ferdasxs.be/fraud_application/directory/statement.php
http://irs.gov.de11dke.be/fraud_application/directory/statement.php
http://irs.gov.hyffvss.be//fraud_application/directory/statement.php
http://irs.gov.kiooojn.be/fraud_application/directory/statement.php
http://irs.gov.kiooojq.be/fraud_application/directory/statement.php
http://irs.gov.kiooojx.be/fraud_application/directory/statement.php
http://irs.gov.kiooojv.be/fraud_application/directory/statement.php
http://irs.gov.kiooojz.be/fraud_application/directory/statement.php
http://irs.gov.hyffvsr.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsz.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsa.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsf.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvsb.be/fraud_application/directory/tax-statement.exe
http://irs.gov.ferdasxs.be/fraud_application/directory/tax-statement.exe
http://irs.gov.de11dke.be/fraud_application/directory/tax-statement.exe
http://irs.gov.hyffvss.be//fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojn.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojq.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojx.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojv.be/fraud_application/directory/tax-statement.exe
http://irs.gov.kiooojz.be/fraud_application/directory/tax-statement.exe
http://www.facebook.com.kiooojn.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojq.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojx.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojv.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojz.be/usersdirectory/MyAccount.php
http://www.facebook.com.kiooojn.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojq.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojx.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojv.be/usersdirectory/updatetool.exe
http://www.facebook.com.kiooojz.be/usersdirectory/updatetool.exe
Title: Re: Facebook botnet
Post by: MysteryFCM on November 27, 2009, 12:21:57 am
Forgot the validation results, hehe.