« previous next »
Pages: [1]   Go Down

Author Topic: Gozi - 89.187.53.197  (Read 3890 times)

0 Members and 1 Guest are viewing this topic.

May 18, 2010, 03:24:14 pm
Read 3890 times

eoin.miller

  • Sr. Member
  • Offline
  • ****
  • 179
Gozi - 89.187.53.197
Pulls down some binary file. Also seeing users posting URL's and passwords to it. Hooray.

http://89.187.53.197/cgi-bin/options.cgi?user_id=1102239761&version_id=14&passphrase=fkjvhsdvlksdhvlsd&socks=0&version=14&crc=78c6dbd2

And th IP is in everyones favorite country, Moldova!
Logged
Pages: [1]   Go Up
« previous next »