Author Topic: ALERT: mstdpro.com and botnets  (Read 6515 times)

0 Members and 1 Guest are viewing this topic.

August 04, 2011, 01:45:30 am
Read 6515 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Quote
Just a warning folks, there's a replacement for the now suspended rulesbreacker.com/wsumg.com botnet, and it's mstdpro.com. Resolving to residential IPs and serving exploits and a trojan through URLs such as;

Code: [Select]
mstdpro.com/mydata/forms/apisrv.php
mstdpro.com/appserver/
mstdpro.com/efs/servlet/military/login.jsp
mstdpro.com/app/bps/main/
mstdpro.com/arc/files/
mstdpro.com/arc/files/archivo.exe
mstdpro.com/system/
mstdpro.com/local_bdno/netoffice

http://hphosts.blogspot.com/2011/08/alert-mstdprocom-and-botnets.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net