Malware Related > Malicious Domains

Trojan Ransom

(1/56) > >>

EP_X0FF:
Hello,

the following links lead to malicious software known as

Trojan Ransom (Kaspersky)
Trojan Winlock (Dr.Web)
Trojan LockScreen (ESET)
TR/Ransom (Avira)


--- Quote ---hxxp://archivpornovideo.info/1/video/porno-rolik1.avi.exe
hxxp://archivpornovideo.info/2/video/porno-rolik2.avi.exe
hxxp://archivpornovideo.info/3/video/porno-rolik3.avi.exe
hxxp://archivpornovideo.info/4/video/porno-rolik4.avi.exe
hxxp://archivpornovideo.info/6/video/porno-rolik6.avi.exe
hxxp://archivpornovideo.info/7/video/porno-rolik7.avi.exe
hxxp://archivpornovideo.info/8/video/porno-rolik8.avi.exe
hxxp://archivpornovideo.info/9/video/porno-rolik9.avi.exe
--- End quote ---

Domain name frequency mutates (10-15 times per day) but host IP always the same - 46.251.237.239

Another ransom known as Lock'Em'All - updates every day.


--- Quote ---hxxp://4xrubin.s3.amazonaws.com/xxx_video.exe
--- End quote ---

Kind Regards.

SysAdMini:
Thanks for submission and welcome to MDL.

We will forward those domain names to GoDaddy abuse desk.

EP_X0FF:
Thanks.

Here are some other fresh links to ransoms


--- Quote ---hxxp://rim2bi.s3.amazonaws.com/xxx_video.exe
--- End quote ---

and this is link to current MBR lock trojan.


--- Quote ---hxxp://ssssaniedirki.ru/xxxvideo.avi.exe
--- End quote ---

Regards.

EP_X0FF:
New ransoms.

MBRLocker hosts on one IP for a long time (only name changing constantly, 3-4 per day).


--- Quote ---hxxp://govnobakovkaxxx.ru/xxxvideo.avi.exe
hxxp://vaginudetrhr.ru/xxxvideo.avi.exe
--- End quote ---

new one on amazon


--- Quote ---hxxp://new3porn.s3.amazonaws.com/xxx_video.exe
--- End quote ---

EP_X0FF:
New ransoms, on the same 46.251.237.239


--- Quote ---hxxp://love-devushkivseti.info/1/video/porno-rolik1.avi.exe
hxxp://love-devushkivseti.info/2/video/porno-rolik2.avi.exe
hxxp://love-devushkivseti.info/3/video/porno-rolik3.avi.exe
hxxp://love-devushkivseti.info/4/video/porno-rolik4.avi.exe
hxxp://love-devushkivseti.info/6/video/porno-rolik6.avi.exe
hxxp://love-devushkivseti.info/7/video/porno-rolik7.avi.exe
hxxp://love-devushkivseti.info/8/video/porno-rolik8.avi.exe
hxxp://love-devushkivseti.info/9/video/porno-rolik9.avi.exe
hxxp://love-devushkivseti.info/10/video/porno-rolik10.avi.exe
--- End quote ---

Navigation

[0] Message Index

[#] Next page