New Storm Worm domains supersameas.com and boardhour.com

[cjeremy]

Two new storm worm fast flux domain names were activated today by the storm worm authors: supersameas.com and boardhour.com

Another note the last domain name: superdrugtesting.com was taken off line this morning.  Look out for new spam coming with blogspot web addresses that redirect users to the new storm worm binaries: StormCodec.exe and StormCodec8.exe.

--jeremy

[bobby]

I can confirm.
4 emails has hit my spambox this morning with the link supersameas.com

btw. I can't get the binaries. Looks dead for me here.

[Edgar Bangkok]

In this moment (5.30 PM Bangkok time =  5.30 AM USA time)  supersameas.com working good
Is possible download all malware files. Stormcodec.exe stormcodec8.exe and sony.exe.

The domain superdrugtesting.com is OFFline

Edgar 

more info http://edetools.blogspot.com/2008/04/storm-worm-cambia-ancora.html

[cjeremy]

Here are the newest domain names for the fast flux network:
   1. orthelike.com - Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   2. limpodrift.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   3. gasperoblue.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   4. thingforyoutoo.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   5. loveinlive.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   6. gribontruck.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   7. giftapplys.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   8. biggetonething.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
   9. newoneforyou.cn - Registrar: Xiamen ChinaSource Internet Service Co., Ltd.
  10. supersameas.com - Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
  11. boardhour.com - Registrar: XIN NET TECHNOLOGY CORPORATION

I have more info here: http://www.sudosecure.net/archives/46