61
Malicious Domains / Re: Paypal Phishing
« Last post by BenENichols on February 25, 2016, 07:42:54 am »Bravo gentlemen, Bravo! 
Recent Posts
62
Malicious Domains / ELF Infected Hosts from @MalwareMustDie and @Squidblacklist
« Last post by BenENichols on February 25, 2016, 07:39:39 am »Sup,
I am the owner of Squidblacklist.org and I thought I might stop by here and share a recent dump from our good friend @Malwaremustdie of ELF infected hosts. After a brief exchange of info on twitter. https://twitter.com/nullandnull/status/702173911895519232
http://www.squidblacklist.org/downloads/65776543735464.txt
Blacklist Em!
Signed,
Benjamin E. Nichols
http://www.squidblacklist.org
I am the owner of Squidblacklist.org and I thought I might stop by here and share a recent dump from our good friend @Malwaremustdie of ELF infected hosts. After a brief exchange of info on twitter. https://twitter.com/nullandnull/status/702173911895519232
http://www.squidblacklist.org/downloads/65776543735464.txt
Code: [Select]
.10bnct.ru
.3gshoptshirt.com
.asiafacility.com
.australiandesignerweddings.com
.bwasog.com
.care2kids.org
.catifiyat.com
.chaudierefioul.com
.chinaqcinspection.com
.coaetonixsystems.com
.comgwtfnews.com
.conautiquesunique.com
.cornerstonefunding.net
.cursosapuestas.com
.cylooks.com
.danidassoy.com
.dennisnapper.com
.divorcelawbf.com
.ecba.biz
.emiliegriffin.com
.energieee.com
.etechlounge.com
.fashionstreaks.com
.firsatikovala.com
.howtheyrank.com
.hyfcj.com
.ifmedia.ru
.ifstusa.org
.imagesoncamera.com
.kcchiefsblog.com
.klingenberg.it
.lexdesign.net
.lingerieconcierge.com
.medkrdnz.com
.mtool.by
.narryhotelpatong.com
.northmacarthur.com
.nowontheclock.com
.phspring.net
.quan100.net
.relianceclouds.com
.cobuglas.com
.sadquotesaboutlove.com
.sayin-yapi.com
.singhsumit.com
.smartpenthousebangkok.com
.solmevini.com
.swfldawgpound.com
.tg-technologies.com
.thesocialsme.com
.thethinkingdog.com
.thienthaohotel.com
.vinabuhmwoo.com
.wagzpetsalon.com
.xinchunge.com
.zagora-online.com
.zahiracollege.netBlacklist Em!
Signed,
Benjamin E. Nichols
http://www.squidblacklist.org
63
Malicious Domains / Re: AppleID Phishing
« Last post by InfectedPacket on February 23, 2016, 12:14:53 am »http://ed.msk.ru/administrator/language/en-GB/apl/ AppleID phishing
http://www.topperszone.com/Comfortproks.com/fwdcomfortprowebsite/applesecurity/UpdateYourInformation/appl/ AppleID phishing
http://www.topperszone.com/Comfortproks.com/fwdcomfortprowebsite/applesecurity/UpdateYourInformation/appl/ AppleID phishing
64
Malicious Domains / Site mirroring news aggregator, spreading malware.
« Last post by ohblindone on February 01, 2016, 05:57:10 pm »new-2016.ga is a complete copy of a popular news aggregation site Voat.co.
It is mirroring all the content on Voat.co and throwing in popup ads and spreading malware. Just going to the site will get one redirected to many different sites and open different windows in one's browser.
Beware and never follow a link to the site.
It is mirroring all the content on Voat.co and throwing in popup ads and spreading malware. Just going to the site will get one redirected to many different sites and open different windows in one's browser.
Beware and never follow a link to the site.
65
Malicious Domains / Re: Paypal Phishing
« Last post by boneco69 on February 01, 2016, 02:38:08 pm »Another...
hxxp://secure-info-account.com/Help/myaccount/summary/Login.php
hxxp://secure-info-account.com/Help/myaccount/summary/Login.php
66
Malicious Domains / Santander (bank) false email with phishing - another one...
« Last post by boneco69 on February 01, 2016, 02:25:48 pm »Ok, today received another email, linked to same domain but another hostname...
-> hxxps://actualizacaomontepi1.websiteseguro.com/ <--
I had already add *.webseguro.com to my network DNS server (Linux gateway with DNS caching and blacklisting).
-> hxxps://actualizacaomontepi1.websiteseguro.com/ <--
I had already add *.webseguro.com to my network DNS server (Linux gateway with DNS caching and blacklisting).
67
Malicious Domains / AppleID Phishing
« Last post by InfectedPacket on January 30, 2016, 06:41:20 pm »http://secure.sa.fe.he.lp.cen.ter.home.sim.ple.up.da.te.now.please.vc-hosting.co.uk/home/uri/ Apple ID Phishing
68
Malicious Domains / Santander (bank) false email with phishing.
« Last post by boneco69 on January 30, 2016, 11:40:28 am »Estimado Cliente,
Informamos que desde o dia 26 de janeiro de 2016, o servico Net24 actualizou e para garantir que aceda ao servico Net24 sera obrigatorio que confirme a activação de Cartão de Matriz.
Caso não seja activado, você não terá acesso aos serviços Net24 e o mesmo serão bloqueado por motivos de segurança.
A activação de Cartão de Matriz é indispensável para evitar fraudes e garantir sua segurança e comodidade.
Dados Activação
1. Utilizador
2. Código PIN Montepio24
3. Cartão de Matriz
Em caso de dificuldade, contacte-nos através do Phone24, pelo telefone 707 20 20 24 (atendimento personalizado das 7:00 à 1:00). Do Estrangeiro ligue +351 21 724 16 24.
Melhores cumprimentos,
Atendimento ao Cliente Montepio S.A.
www.montepio.pt --> links to false site hxxps://actualizacaomontepio.websiteseguro.com/ (https changed to prevent users clicks)
Best regards.
Informamos que desde o dia 26 de janeiro de 2016, o servico Net24 actualizou e para garantir que aceda ao servico Net24 sera obrigatorio que confirme a activação de Cartão de Matriz.
Caso não seja activado, você não terá acesso aos serviços Net24 e o mesmo serão bloqueado por motivos de segurança.
A activação de Cartão de Matriz é indispensável para evitar fraudes e garantir sua segurança e comodidade.
Dados Activação
1. Utilizador
2. Código PIN Montepio24
3. Cartão de Matriz
Em caso de dificuldade, contacte-nos através do Phone24, pelo telefone 707 20 20 24 (atendimento personalizado das 7:00 à 1:00). Do Estrangeiro ligue +351 21 724 16 24.
Melhores cumprimentos,
Atendimento ao Cliente Montepio S.A.
www.montepio.pt --> links to false site hxxps://actualizacaomontepio.websiteseguro.com/ (https changed to prevent users clicks)
Best regards.
69
Malicious Domains / Re: soundclou.com - dangerous exploit installer/typosquatter
« Last post by Malvertiser on January 29, 2016, 04:59:14 pm »Hmmm... This (hxxp://soundclou.com) redirected me to a Browlock.fakeTechSupport with the following message:
"Important security message. Please dial the number provided ASAP. You will be guided for the removal of the adware/spyware virus on your computer..."
Blah blah blah.
No exploit seems to be hosted on this site.
The other url posted here is currently offline.
"Important security message. Please dial the number provided ASAP. You will be guided for the removal of the adware/spyware virus on your computer..."
Blah blah blah.
No exploit seems to be hosted on this site.
The other url posted here is currently offline.
70
Malicious Domains / Trojan posing as a Youtube To MP3 converter
« Last post by Malvertiser on January 22, 2016, 05:16:24 pm »The following URL will lead to the site hosting the malware
hxxp://youtube-to-mp3.com
hxxp://youtube-to-mp3.com