178 New Malicious Sites
- http://www.malwaredomains.com/wordpress/?p=1531
January 2nd, 2011 - "Malicious Sites containing PDF Exploits, Storm 3.0 and other malware… Sources include safebrowsing.clients.google.com, www.shadowserver.org, malekal.com…"
Urgent Block: NoS.fileave[dot]com and dota2trailer[dot]tk
- http://www.malwaredomains.com/wordpress/?p=1537
January 6th, 2011 - "From the Internet Storm Center*: "dota2trailer .tk claims to have a video trailer for the new Dota 2 game but instead installs a keylogger to steal credentials from gamers… Looking at the code on the site it does try to use java to download “hxxp://NoS. fileave. com/CamPlug.exe” These sites will be blocked on tonight’s update but you shouldn’t wait…"
Fake Game Demo website
* http://isc.sans.edu/diary.html?storyid=10228
Last Updated: 2011-01-06 21:10:19 UTC - "… VirusTotal's url check* didn't show -any- known maliciousness associated with that url…"
* http://www.virustotal.com/url-scan/report….5012-1294334566
Submission date: 2011-01-06 18:22:46 (UTC)
Antivirus report: View downloaded file analysis
Webscan result: 0/6 (0.0%)
[ Firefox Clean site, G-Data Clean site, Google Safebrowsing Clean site, Opera Clean site, ParetoLogic Clean site, Phishtank Clean site ]
- http://www.virustotal.com/file-scan/report…54bf-1294358709
File name: CamPlug.exe
Submission date: 2011-01-07 00:05:09 (UTC)
Result: 2/43 (4.7%)
rogue, geinimi, torpig, android malware sites
- http://www.malwaredomains.com/wordpress/?p=1544
January 6th, 2011 - "Domains associated with piracy, android malware, rogue security, artro, and other stuff you don’t want you or your user’s browser visiting or contacting. Source include securehomenetworks.blogspot.com, vxvault.siri-urz.net/URL_List.php, secuboxlabs.fr…"
194 New Domains
- http://www.malwaredomains.com/wordpress/?p=1549
January 10th, 2011 - "194 malicious domains to block. Sources include security.thejoshmeister.com, securehomenetworks.blogspot.com, blogs.paretologic.com…"
196 New Domains to Block
- http://www.malwaredomains.com/wordpress/?p=1564
January 14th, 2011 - "196 new domains to add to your blocklist. Rogue security domains, zeus, backdoor, exploit domains listed at blog.urlvoid.com, securehomenetworks.blogspot.com, vxvault.siri-urz.net and others…"
200 New Domains
- http://www.malwaredomains.com/wordpress/?p=1568
January 18th, 2011 - "200 new domains to add to your malware blocklist. Artro domains, exploit domains, fastflux domains, listed at securehomenetworks.blogspot.com, sucuri.net, and others…"
artro, fastflux, phishing, torping domains…
- http://www.malwaredomains.com/wordpress/?p=1577
January 20th, 2011 - "165 new domains associated with torpig, rogue antivirus, phishing, fastflux, and other badness. Sources include atlas.arbor.net, abuse.ch, vxvault.siri-urz.net…"
iframe, gumblar, rogue and other malicious domains
- http://www.malwaredomains.com/wordpress/?p=1586
January 26th, 2011 - "Malicious domains associated with zeus, rogue security, gumblar and other nastiness. Sources include securehomenetworks.blogspot.com, blog.unmaskparasites.com, www.shadowserver.org…"
exploit, gumblar, neosploit, zeus domains
- http://www.malwaredomains.com/wordpress/?p=1590
January 29th, 2011 - "Domains associated with gumblar, zeus, neosploit, spyeye and other exploits and trojan badness. Sources include www3.malekal.com, blog.unmarkparasites, viralerts.com…"
gumblar, neosploit, mebroot and other malicious domains
- http://www.malwaredomains.com/wordpress/?p=1628
February 10th, 2011 - "132 malicious sites and domains to add to your blocklist or malware shunlist. Sources include viralerts.com, securehomenetworks.blogspot.com, safebrowsing.google.com…"
