Author Topic: Gozi - 89.187.53.197  (Read 3890 times)

0 Members and 1 Guest are viewing this topic.

May 18, 2010, 03:24:14 pm
Read 3890 times

eoin.miller

  • Sr. Member

  • Offline
  • ****

  • 179
Pulls down some binary file. Also seeing users posting URL's and passwords to it. Hooray.

http://89.187.53.197/cgi-bin/options.cgi?user_id=1102239761&version_id=14&passphrase=fkjvhsdvlksdhvlsd&socks=0&version=14&crc=78c6dbd2

And th IP is in everyones favorite country, Moldova!