Author Topic: Google poisoning, IST, rogues and 250+ reasons to avoid 209.44.* ......  (Read 2566 times)

0 Members and 1 Guest are viewing this topic.

May 15, 2009, 02:58:21 am
Read 2566 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Quote
Following on from the IST (Internet Service Team) and their blackhat SEO involving Google, we've got yet another example of Google poisoning, this time from Netelligent Hosting Services Inc and going via SteepHost and Layered Tech.

Unlike the previous one, that contained the script directly, this one contains random rubbish on the site itself, but loads a file called script.js;

vURL Online - Dissect - http://test-file-and-windows-defender.mycepi.net
http://vurl.mysteryfcm.co.uk/?url=618085

script.js is pretty much the same as the last one, in that it checks the referer, and ONLY redirects to the malware, if you've come from a search engine result;

Read more!
http://hphosts.blogspot.com/2009/05/google-poisoning-ist-rogues-and-250.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net