Author Topic: directseek.org hosting Koobface worm and exploit  (Read 3028 times)

0 Members and 1 Guest are viewing this topic.

April 29, 2009, 03:04:59 pm
Read 3028 times

Lee Harvey

  • Newbie

  • Offline
  • *

  • 3

hxxp://directseek.org/25/load.php
hxxp://directseek.org/25/iepdf.php?f=old

April 29, 2009, 03:21:05 pm
Reply #1

RS-232

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 165
From the same ip...
http://www.bfk.de/bfk_dnslogger.html?query=193.111.244.21#result

Quote
hxxp://adult.oo.lv/clip-free-xxx/
hxxp://adult.oo.lv/clip-free-xxx/redirect.js
hxxp://www.freexxxmovies.in/redirect.php?q=Clip+free+xxx
hxxp://sexonline.geco.hu/iframe.php?l=hxxp://freeringtonesonline.org/KV/search.php?q=Clip free xxx
hxxp://xxx.sacaschool.com/15//index.php
hxxp://onlinepharmacy4you.org/65/
hxxp://onlinepharmacy4you.org/65/load.php
http://www.virustotal.com/analisis/53a0b1bb804051db4357a8ddc5a02b7b
Results: 15/40

And more or less,all of the rest of domains over there...
Quote
hxxp://adult.pouet.be/free-story-xxx/
hxxp://adult.pouet.be/free-story-xxx/red.js
hxxp://www.freexxxmovies.in/redirect.php?q=Free+story+xxx
hxxp://sexonline.geco.hu/iframe.php?l=http://freeringtonesonline.org/KV/search.php?q=Free story xxx
hxxp://xxx.sacaschool.com/15//index.php
hxxp://onlinepharmacy4you.org/65/

Quote
hxxp://sexonline4you.dyn.hu/15/
hxxp://onlinepharmacy4you.org/65/

Quote
hxxp://www.superadultsearch.com/js_go_f1.php
hxxp://onlinepharmacy4you.org/65/

Quote
hxxp://freeringtonesonline.org/15/js_go_f1.php
hxxp://onlinepharmacy4you.org/65/

Quote
hxxp://xxxmovies.dip.jp/15/js_go_f1.php
hxxp://onlinepharmacy4you.org/65/

Quote
hxxp://xxxmovies.jpn.ph/5/js_go_f1.php
hxxp://onlinepharmacy4you.org/65/
Only for the "fun" of it...rs-232 aka sowhat-x aka younameit ;-)
http://www.youtube.com/watch?v=fADjY97_KTw