178 New Malicious Sites
- http://www.malwaredo...rdpress/?p=1531
January 2nd, 2011 - "Malicious Sites containing PDF Exploits, Storm 3.0 and other malware… Sources include safebrowsing.clients.google.com, www.shadowserver.org, malekal.com..."
WE'RE SURE THAT YOU'LL LOVE US!
Hey there! 
Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 93098 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.
Try What the Tech -- It's free!
Malware Domain Blocklist updated...
Started by
AplusWebMaster
, Jan 03 2011 04:02 AM
437 replies to this topic
#1
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 03 January 2011 - 04:02 AM
178 New Malicious Sites
- http://www.malwaredo...rdpress/?p=1531
January 2nd, 2011 - "Malicious Sites containing PDF Exploits, Storm 3.0 and other malware… Sources include safebrowsing.clients.google.com, www.shadowserver.org, malekal.com..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Register to Remove
#2
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 06 January 2011 - 05:52 PM
FYI...
Urgent Block: NoS.fileave[dot]com and dota2trailer[dot]tk
- http://www.malwaredo...rdpress/?p=1537
January 6th, 2011 - "From the Internet Storm Center*: "dota2trailer .tk claims to have a video trailer for the new Dota 2 game but instead installs a keylogger to steal credentials from gamers… Looking at the code on the site it does try to use java to download “hxxp://NoS. fileave. com/CamPlug.exe” These sites will be blocked on tonight’s update but you shouldn’t wait…"
Fake Game Demo website
* http://isc.sans.edu/...l?storyid=10228
Last Updated: 2011-01-06 21:10:19 UTC - "... VirusTotal's url check* didn't show -any- known maliciousness associated with that url..."
* http://www.virustota...5012-1294334566
Submission date: 2011-01-06 18:22:46 (UTC)
Antivirus report: View downloaded file analysis
Webscan result: 0/6 (0.0%)
[ Firefox Clean site, G-Data Clean site, Google Safebrowsing Clean site, Opera Clean site, ParetoLogic Clean site, Phishtank Clean site ]
- http://www.virustota...54bf-1294358709
File name: CamPlug.exe
Submission date: 2011-01-07 00:05:09 (UTC)
Result: 2/43 (4.7%)
1) http://www.mywot.com...nos.fileave.com
Spam - 1
2) http://www.mywot.com...dota2trailer.tk
Spam - 1 / Browser exploit - 2
Urgent Block: NoS.fileave[dot]com and dota2trailer[dot]tk
- http://www.malwaredo...rdpress/?p=1537
January 6th, 2011 - "From the Internet Storm Center*: "dota2trailer .tk claims to have a video trailer for the new Dota 2 game but instead installs a keylogger to steal credentials from gamers… Looking at the code on the site it does try to use java to download “hxxp://NoS. fileave. com/CamPlug.exe” These sites will be blocked on tonight’s update but you shouldn’t wait…"
Fake Game Demo website
* http://isc.sans.edu/...l?storyid=10228
Last Updated: 2011-01-06 21:10:19 UTC - "... VirusTotal's url check* didn't show -any- known maliciousness associated with that url..."
* http://www.virustota...5012-1294334566
Submission date: 2011-01-06 18:22:46 (UTC)
Antivirus report: View downloaded file analysis
Webscan result: 0/6 (0.0%)
[ Firefox Clean site, G-Data Clean site, Google Safebrowsing Clean site, Opera Clean site, ParetoLogic Clean site, Phishtank Clean site ]
- http://www.virustota...54bf-1294358709
File name: CamPlug.exe
Submission date: 2011-01-07 00:05:09 (UTC)
Result: 2/43 (4.7%)
1) http://www.mywot.com...nos.fileave.com
Spam - 1
2) http://www.mywot.com...dota2trailer.tk
Spam - 1 / Browser exploit - 2
Edited by AplusWebMaster, 06 January 2011 - 08:07 PM.
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#3
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 08 January 2011 - 04:02 AM
FYI...
rogue, geinimi, torpig, android malware sites
- http://www.malwaredo...rdpress/?p=1544
January 6th, 2011 - "Domains associated with piracy, android malware, rogue security, artro, and other stuff you don’t want you or your user’s browser visiting or contacting. Source include securehomenetworks.blogspot.com, vxvault.siri-urz.net/URL_List.php, secuboxlabs.fr..."
rogue, geinimi, torpig, android malware sites
- http://www.malwaredo...rdpress/?p=1544
January 6th, 2011 - "Domains associated with piracy, android malware, rogue security, artro, and other stuff you don’t want you or your user’s browser visiting or contacting. Source include securehomenetworks.blogspot.com, vxvault.siri-urz.net/URL_List.php, secuboxlabs.fr..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#4
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 11 January 2011 - 10:55 PM
FYI...
194 New Domains
- http://www.malwaredo...rdpress/?p=1549
January 10th, 2011 - "194 malicious domains to block. Sources include security.thejoshmeister.com, securehomenetworks.blogspot.com, blogs.paretologic.com..."
194 New Domains
- http://www.malwaredo...rdpress/?p=1549
January 10th, 2011 - "194 malicious domains to block. Sources include security.thejoshmeister.com, securehomenetworks.blogspot.com, blogs.paretologic.com..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#5
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 15 January 2011 - 04:35 PM
FYI...
196 New Domains to Block
- http://www.malwaredo...rdpress/?p=1564
January 14th, 2011 - "196 new domains to add to your blocklist. Rogue security domains, zeus, backdoor, exploit domains listed at blog.urlvoid.com, securehomenetworks.blogspot.com, vxvault.siri-urz.net and others..."
196 New Domains to Block
- http://www.malwaredo...rdpress/?p=1564
January 14th, 2011 - "196 new domains to add to your blocklist. Rogue security domains, zeus, backdoor, exploit domains listed at blog.urlvoid.com, securehomenetworks.blogspot.com, vxvault.siri-urz.net and others..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#6
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 19 January 2011 - 06:00 PM
FYI...
200 New Domains
- http://www.malwaredo...rdpress/?p=1568
January 18th, 2011 - "200 new domains to add to your malware blocklist. Artro domains, exploit domains, fastflux domains, listed at securehomenetworks.blogspot.com, sucuri.net, and others..."
200 New Domains
- http://www.malwaredo...rdpress/?p=1568
January 18th, 2011 - "200 new domains to add to your malware blocklist. Artro domains, exploit domains, fastflux domains, listed at securehomenetworks.blogspot.com, sucuri.net, and others..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#7
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 21 January 2011 - 03:19 PM
FYI...
artro, fastflux, phishing, torping domains...
- http://www.malwaredo...rdpress/?p=1577
January 20th, 2011 - "165 new domains associated with torpig, rogue antivirus, phishing, fastflux, and other badness. Sources include atlas.arbor.net, abuse.ch, vxvault.siri-urz.net..."
artro, fastflux, phishing, torping domains...
- http://www.malwaredo...rdpress/?p=1577
January 20th, 2011 - "165 new domains associated with torpig, rogue antivirus, phishing, fastflux, and other badness. Sources include atlas.arbor.net, abuse.ch, vxvault.siri-urz.net..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#8
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 24 January 2011 - 02:03 PM
FYI...
gumblar, artro, zeus domains
- http://www.malwaredo...rdpress/?p=1581
January 23rd, 2011 - "Domains associated with gumblar, zeus, drive-by’s, rogues, etc... Sources include viralerts.com, safebrowsing.google.com, blog.unmaskparasites.com ..."
gumblar, artro, zeus domains
- http://www.malwaredo...rdpress/?p=1581
January 23rd, 2011 - "Domains associated with gumblar, zeus, drive-by’s, rogues, etc... Sources include viralerts.com, safebrowsing.google.com, blog.unmaskparasites.com ..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#9
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 27 January 2011 - 05:10 AM
FYI...
iframe, gumblar, rogue and other malicious domains
- http://www.malwaredo...rdpress/?p=1586
January 26th, 2011 - "Malicious domains associated with zeus, rogue security, gumblar and other nastiness. Sources include securehomenetworks.blogspot.com, blog.unmaskparasites.com, www.shadowserver.org..."
iframe, gumblar, rogue and other malicious domains
- http://www.malwaredo...rdpress/?p=1586
January 26th, 2011 - "Malicious domains associated with zeus, rogue security, gumblar and other nastiness. Sources include securehomenetworks.blogspot.com, blog.unmaskparasites.com, www.shadowserver.org..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#10
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 31 January 2011 - 03:49 AM
FYI...
exploit, gumblar, neosploit, zeus domains
- http://www.malwaredo...rdpress/?p=1590
January 29th, 2011 - "Domains associated with gumblar, zeus, neosploit, spyeye and other exploits and trojan badness. Sources include www3.malekal.com, blog.unmarkparasites, viralerts.com..."
- http://www.malwaredo...rdpress/?p=1597
January 31st, 2011 - "Last night’s “justdomains” file seems to have been corrupted… We just replaced it with a new one..."
exploit, gumblar, neosploit, zeus domains
- http://www.malwaredo...rdpress/?p=1590
January 29th, 2011 - "Domains associated with gumblar, zeus, neosploit, spyeye and other exploits and trojan badness. Sources include www3.malekal.com, blog.unmarkparasites, viralerts.com..."
- http://www.malwaredo...rdpress/?p=1597
January 31st, 2011 - "Last night’s “justdomains” file seems to have been corrupted… We just replaced it with a new one..."
Edited by AplusWebMaster, 31 January 2011 - 02:04 PM.
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
Register to Remove
#11
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 03 February 2011 - 05:12 PM
FYI...
210 Domains
- http://www.malwaredo...rdpress/?p=1601
February 2nd, 2011 - "... 210 domains associated with artro, gumblar, rbn, torpig and other exploits. Source include www3.malekal.com, securehomenetworks.blogspot.com, honeywhales.com, blog.unmaskparasites.com..."
210 Domains
- http://www.malwaredo...rdpress/?p=1601
February 2nd, 2011 - "... 210 domains associated with artro, gumblar, rbn, torpig and other exploits. Source include www3.malekal.com, securehomenetworks.blogspot.com, honeywhales.com, blog.unmaskparasites.com..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#12
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 06 February 2011 - 09:47 PM
FYI...
179 New Malicious Domains
- http://www.malwaredo...rdpress/?p=1611
February 6th, 2011 - "179 new malicious sites associated with gumblar, backdoors, moneymule, rogue security. Sources include securehomenetworks.blogspot.com, log.unmaskparasites.com, www.cyber-ta.org..."
179 New Malicious Domains
- http://www.malwaredo...rdpress/?p=1611
February 6th, 2011 - "179 new malicious sites associated with gumblar, backdoors, moneymule, rogue security. Sources include securehomenetworks.blogspot.com, log.unmaskparasites.com, www.cyber-ta.org..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#13
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 08 February 2011 - 10:48 PM
FYI...
NeoSploit, FastFlux, Zeus, MoneyMule Domains
- http://www.malwaredo...rdpress/?p=1624
February 8th, 2011 - "Something for everyone… Neosploit. Gumblar, fastflux, rogue, phoenix, money mule, zeus, and more… Sources include securehomenetworks.blogspot.com, ddanchev.blogspot.com (Welcome Back), blog.unmaskparasites.com, zeustracker.abuse.ch..."
NeoSploit, FastFlux, Zeus, MoneyMule Domains
- http://www.malwaredo...rdpress/?p=1624
February 8th, 2011 - "Something for everyone… Neosploit. Gumblar, fastflux, rogue, phoenix, money mule, zeus, and more… Sources include securehomenetworks.blogspot.com, ddanchev.blogspot.com (Welcome Back), blog.unmaskparasites.com, zeustracker.abuse.ch..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#14
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 11 February 2011 - 12:40 PM
FYI...
gumblar, neosploit, mebroot and other malicious domains
- http://www.malwaredo...rdpress/?p=1628
February 10th, 2011 - "132 malicious sites and domains to add to your blocklist or malware shunlist. Sources include viralerts.com, securehomenetworks.blogspot.com, safebrowsing.google.com..."
gumblar, neosploit, mebroot and other malicious domains
- http://www.malwaredo...rdpress/?p=1628
February 10th, 2011 - "132 malicious sites and domains to add to your blocklist or malware shunlist. Sources include viralerts.com, securehomenetworks.blogspot.com, safebrowsing.google.com..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
#15
AplusWebMaster
-
- Authentic Member
-
- 10,472 posts
AplusWebMaster
- Interests:... The never-ending battle for Truth, Justice, and the American way.
Posted 14 February 2011 - 10:16 AM
FYI...
spyeye, pheonix, palevo, blackhole exploit kit domains
- http://www.malwaredo...rdpress/?p=1636
February 13th, 2011 - "Malicious domains associated with blackhole exploit kit, palevo, gumblar, spyeye and other exploits. Sources include honeywhales.com, honeywhales.com, stopmalvertising.com..."
spyeye, pheonix, palevo, blackhole exploit kit domains
- http://www.malwaredo...rdpress/?p=1636
February 13th, 2011 - "Malicious domains associated with blackhole exploit kit, palevo, gumblar, spyeye and other exploits. Sources include honeywhales.com, honeywhales.com, stopmalvertising.com..."
.The machine has no brain.
......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
