<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: pod-o-matic]]></title>
    <link>http://securityratty.com/tag/pod-o-matic</link>
    <description></description>
    <pubDate>Sun, 17 Feb 2008 18:14:21 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Embassy of Brazil in India Compromised]]></title>
      <link>http://securityratty.com/article/d16a985654ea698c4e0d3ab5e394be74</link>
      <guid>http://securityratty.com/article/d16a985654ea698c4e0d3ab5e394be74</guid>
      <description><![CDATA[Only an amateur or unethical competition would embedd malicious links at the Embassy of Brazil in India's site , referencing their online community. With the chances of an Embassy involvement into the...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SRxJCIZifgI/AAAAAAAACc0/7XHc2f7BAQo/s1600-h/brazil_embassy_india_compromised_1.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SRxJCIZifgI/AAAAAAAACc0/7XHc2f7BAQo/s200/brazil_embassy_india_compromised_1.JPG" /></a>Only an amateur or unethical competition would embedd <a href="http://securitylabs.websense.com/content/Alerts/3228.aspx">malicious links at the Embassy of Brazil in India's site</a>, referencing their online community. With the chances of <a href="http://www.brazilembassy.in/">an Embassy</a> involvement into the fake antivirus software industry close to zero,<br />
<br />
<a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SRxE9OAVBCI/AAAAAAAACck/u5qhnNXJyoE/s1600-h/brazil_embassy_free_web_space_rogue.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SRxE9OAVBCI/AAAAAAAACck/u5qhnNXJyoE/s200/brazil_embassy_free_web_space_rogue.JPG" /></a>The compromise is a great example of a mixed use of pure malicious domains in a combination with compromised legitimate ones and on purposely registered accounts at free web space providers, hosting the blackhat SEO content. However, digging deeper we expose the entire malicious doorways ecosystem pushing PDF exploits, banker malware and Zlob variants. The malicious attackers embedded links to their blackhat SEO farms advertising fake security software, and also a link to a traffic redirection doorway<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><b>epmwckme.dex1.com</b><br />
<b>htkobaf.dex1.com</b><br />
<b>ogbucof.dex1.com</b><br />
<b>segundomuelle.com/mex/antivirus</b><br />
<b>jgzleaa.dex1.com</b><br />
<b>igpran.ru/services/tolstye</b><br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SRxFRKFC0LI/AAAAAAAACcs/hsjTDmrLtbo/s1600-h/obfuscation_brazil_embassy.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SRxFRKFC0LI/AAAAAAAACcs/hsjTDmrLtbo/s200/obfuscation_brazil_embassy.JPG" /></a>The active and redirecting <b>traff .asia</b> (89.149.251.203) is currently serving a fake account suspended notice - "<i>This account has been suspended. Either the domain has been overused, or the reseller ran out of resources.</i>" but is whatsoever redirecting us to <b>antimalware09 .net</b>. This particular traffic redirection doorway is actively redirecting us to a command and control server running a well known web malware exploitation kit which is currently serving PDF exploits. <b>&nbsp;</b><br />
<br />
<b>google-analyze .com/socket/index.php</b> (216.195.59.77) from where we're redirected to <b>google-analyze.com/tracker/load.php</b> which is serving system.exe (Trojan-Spy.Win32.Zbot.ehk; Win32.TrojanSpy.Zbot.gen!C.5), and <b>google-analyze .com/tracker/pdf.php</b> (Exploit:Win32/Pdfjsc.G; Exploit.JS.Pdfka.w; Bloodhound.Exploit.196). Naturally, within the live exploit URLs there are multiple IFRAMEs redirecting us to more of this group's campaigns. <b>google-analyze .com</b>&nbsp; has multiple IFRAMEs pointing to <b>google-analystic .net</b> (209.160.67.56), yet another traffic redirection doorway further exposing their campaigns.<br />
<br />
For instance, <b>google-analystic .net/in.cgi?20</b> loads <b>google-analystic.net/tea.php</b> (209.160.67.56) where <b>google-analystic .net/in.cgi?8</b> is redirecting to <b>91.203.93.61 /in.cgi?2</b> taking us to <b>91.203.93.61 /25/2/</b> where we deobfuscate the javascript leading us to the exact location of the PDF exploit - <b>91.203.93.61 /25/2/getfile.php?f=pdf</b>. This is just for starters. <b>google-analystic .net/in.cgi?9</b> redirects to <b>mangust32 .cn/pod/index.php</b> (218.93.202.102) where they serve load.exe (Backdoor:Win32/Koceg.gen!A) at <br />
<b>mangust32 .cn/pod2/load.php</b> and load.exe at <b>mangust32 .cn/eto2/load.php</b>, moreover, <b>google-analystic .net/in.cgi?10</b> leads us to <b>mmcounter .com/in.cgi?id194</b> (94.102.50.130) a traffic management login which is no longer responding. The last IFRAME found within google-analystic points to <b>busyhere .ru/in.cgi?pipka</b> which redirects to <b>beshragos .com/work/index.php</b> (79.135.187.38) where once we<br />
deobfuscate the script, we get to see the PDF exploit location <b>beshragos.com /work/getfile.php?f=pdf</b>.<br />
<br />
What's contributing to the increase of PDF exploits durin the last month? It's an updated version of a web based malware exploitation tool, which despite the fact that it remains proprietary for the time being, will leak in the next couple of weeks causing the usual short-lived epidemic.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/01/dutch-embassy-in-moscow-serving-malware.html">The Dutch Embassy in Moscow Serving Malware</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/us-consulate-st-petersburg-serving.html">U.S Consulate in St. Petersburg Serving Malware</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/syrian-embassy-in-london-serving.html">Syrian Embassy in London Serving Malware</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/have-your-malware-in-timely-fashion.html">French Embassy in Libya Serving Malware</a><b> <br />
</b><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=GVhoN"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=GVhoN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1M6tN"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1M6tN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=BksVn"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=BksVn" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=u03In"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=u03In" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=HzjZN"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=HzjZN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=9KBON"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=9KBON" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2Qbtn"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2Qbtn" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/451892286" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 13 Nov 2008 06:47:45 +0000</pubDate>
      <category domain="http://securityratty.com/tag/embassy">embassy</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <category domain="http://securityratty.com/tag/traffic redirection doorway">traffic redirection doorway</category>
      <category domain="http://securityratty.com/tag/syrian embassy">syrian embassy</category>
      <category domain="http://securityratty.com/tag/exploit">exploit</category>
      <category domain="http://securityratty.com/tag/live exploit urls">live exploit urls</category>
      <category domain="http://securityratty.com/tag/cgi">cgi</category>
      <category domain="http://securityratty.com/tag/pdf exploits durin">pdf exploits durin</category>
      <category domain="http://securityratty.com/tag/pdf exploits">pdf exploits</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/451892286/embassy-of-brazil-in-india-compromised.html">Embassy of Brazil in India Compromised</source>
    </item>
    <item>
      <title><![CDATA[In Next-Gen Bullets and Bombs, Even the Casing Explodes]]></title>
      <link>http://securityratty.com/article/d0a5d9866a8d1cba92fde9bc4208e745</link>
      <guid>http://securityratty.com/article/d0a5d9866a8d1cba92fde9bc4208e745</guid>
      <description><![CDATA[The Pentagon has quietly been working on a new arsenal of advanced weaponry that replaces metal casings with &quot;reactive materials,&quot; normally harmless matter that combines to release explosive amounts...]]></description>
      <content:encoded><![CDATA[<p>
The Pentagon has quietly been working on a new arsenal of advanced weaponry that replaces metal casings with "reactive materials," normally harmless matter that combines to release explosive amounts of energy on impact, tearing targets apart with violent fury. 
</p><p>
In development for more than 30 years, the research is beginning to bear fruit, and may soon spawn more powerful bombs, warheads that tear apart stone and concrete, mines that can be set to stun or kill, and grenades that can swat rockets or mortar rounds out of the sky like flies. 
</p><p>
"You can get effects that are more precisely tailored to a particular target," says John Pike, director of Washington military research group <a href="http://www.globalsecurity.org/">GlobalSecurity.org</a>. "And you're able to get a greater effect out of a smaller munition."
</p><p>
Reactive materials are combinations of materials that are normally stable, but, when subjected to sudden shock -- such as striking a target -- release a large amount of energy. Depending on the composition and warhead design, the energy can be released as heat, a blast or a combination of the two. Unlike conventional explosives, RMs cannot be set off by fuses. Technically, they are classified as flammable solids, and they are less hazardous to transport and store than explosives.
</p><p>
While they're more energetic than explosives, RMs are not intended to be a substitute. Instead, they will replace warhead components normally made of metal.
</p><p>
An analysis of U.S. military procurement papers and defense contractor presentations, as well as interviews with companies working on the technology, suggests that a wave of munitions using reactive materials may be headed for a battlefield near you.
</p><p>
The material can dramatically magnify the yield of conventional bombs, and do away with the waste embodied by a bomb's inert metal skin. The U.S. Air Force's 5,000 BLU-122 bunker buster, for example, contains just 780 pounds of explosives; the other 80 percent is the bomb's thick steel casing. DARPA's <a href="https://www.fbo.gov/files/f0a/f0accb88909eadb4ace790fe731eb03b.doc?i=1482beb061c1dbdbc36c23683d85e170">Reactive Munition program</a> (.doc) aims to replace that steel with RMs, to create a bomb with a blast four times as powerful. Alternatively, a new bomb could be half the size of existing weapons but twice as powerful.
</p>

<p>Conventional warheads could also benefit from an RM makeover. For centuries, shells have blasted out steel shrapnel, small pieces of metal that cause damage with their high speed. Defense contractor Alliant Techsystems is developing a warhead called <a href="http://atk.mediaroom.com/index.php?s=press_releases&item=801"> BattleAxe</a> for the Air Force that uses fragments made of RM instead of metal. Those fragments will explode on impact, making the warhead far more effective against soft targets like trucks.
</p>

<p>
RM shrapnel is also being touted as the ideal way of <a href="http://www.virtualacquisitionshowcase.com/docs/2007/DETech-Brief.pdf ">shooting down incoming rockets and mortar bombs</a> (.pdf).
</p>

<p>
A radar-guided defense pod can automatically engage incoming rockets or other threats using RM-based grenades. Weapons designers suggest that RMs can be five to ten times as effective as the existing inert shrapnel for this task. Moreover, RM shrapnel can be engineered to burn out at a set distance, so there is no hazard to nearby friendly forces.
</p>


<!--pagebreak-->

<p>
Bullets can even be made of RM. The Navy's new 
<a href="http://www.onr.navy.mil/emrg/electromagnetic-railgun.asp">electromagnetic railgun</a> has been criticized because it can only fire solid slugs, not the usual explosive shells. However, documents reveal that <a href="http://www.psicorp.com/preleases/0105tungsten.shtml">tungsten-based RM</a> rounds are being developed for the weapon. These will explode on impact, making the railgun effective against buildings, ships and vehicles.
</p><p>
Shaped charges are another application where RMs can increase the effectiveness of existing designs. In a shaped charge, a hollow metal cone is surrounded by explosive material, which is then detonated, forcing the blast through the small end of the cone.
</p><p>
"The action is analogous to stamping on an open toothpaste tube, ejecting the liquid contents," says Douglas Millard of British defense contractors <a href="http://www.qinetiq.com/">QinetiQ</a>. 
</p><p>
Replace the metal liner with RM, and the explosive power of that jet will increase dramatically.
</p><p>
"Such reactions are highly exothermic and therefore lead to the release of large amounts of energy, which is in addition to the kinetic energy within the jet," Millard says. "An increase in the energy coupled into the target occurs and this results in the creation of greater damage to the target."
</p><p>
QinetiQ is marketing an RM-based shaped charge called <a href="http://www.qinetiq.com/home/newsroom/news_releases_homepage/2007/2nd_quarter/qinetiq__shell_and.html">Connex</a> for oil-well perforation in the civil market. Meanwhile, the U.S. Army is developing a demolition charge called Bam Bam that blasts a jet of RM deep into stone or concrete, producing massive damage
</p><p>
One version of the Bam Bam charge is intended for demolishing bridges and other structures. An alternative version blasts broader, shallower craters in roads or runways, making them useless.
</p><p>
RMs will also transform another mutation called the Explosively Formed Penetrator, a modified version of the shaped charge. Instead of producing a narrow, short-range jet, the Penetrator fires an aerodynamic slug of metal over a long distance. It's best known as a favored weapon of insurgents in Iraq. Again, replacing the metal with RM makes a much deadlier weapon -- after punching through armor, the slug releases energy like a grenade going off.
</p><p>
If you're a weapons designer, RMs also offer amazing flexibility. Alliant Techsystems is building a <a href="http://proceedings.ndia.org/3500/Cvetnic_Demo_NDIA.pps">variable landmine</a> (.pps) -- a so-called "dial-a-yield" weapon that can produce a range of different effects.
</p><p>
At the lowest setting, most of the output would be light -- a dazzling warning that would be impossible to miss. A higher setting would produce intense heat, creating a "discomfort zone" to drive off intruders. The third setting produces a nonlethal blast, like the concussion stun grenades used by Special Forces. If lethal force is called for, the mine could be set to produce either inert shrapnel or reactive shrapnel that explodes on impact.
</p><p>
RM munitions may face legal challenges. Under the St. Petersburg Declaration of 1868, the use of explosive projectiles with a weight of less than 400 grams is forbidden, as is using incendiary ammunition, like napalm, against personnel. But RMs are not technically explosive or incendiary, and although the effect on human targets might cause protests from some groups, they are likely to be accepted, human rights experts say.
</p><p>
"Like any weapon, it would have to go through a lengthy effectiveness and then legal review, " says Marc Garlasco, senior military analyst at <a href="http://www.hrw.org/">Human Rights Watch</a>. "If used in the open against military targets, it does not seem to have any obvious problems at first blush." 
</p><p>
However, there may be technology issues too. Although the developers sound very upbeat in all their descriptions of RM munitions, producing material that will reliably release energy only when required is extremely challenging.
</p><p>
"The fact that they've been working on it so long and don't seem to have fielded anything yet suggests that there may be a problem with the technology," GlobalSecurity's Pike says.
</p><p>
Normally new weapons are fielded rapidly if there is a military demand -- assuming they work. So far, RMs have not made it into the field, and the technology may not be as mature as developers suggest.
</p><p>
But Pike also notes that there has been an unprecedented surge in munitions development over the last few years, with "all kinds of weird stuff" being developed.
</p><p>
So after decades of being kept very quiet, reactive materials may soon be making a lot of noise.
</p><p>
---
</p><p>
Check out <a href="http://blog.wired.com/defense/">Danger Room</a> for more on reactive materials.
</p><br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=6c55edcd405de4222b72dd8dc1e1e502" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=6c55edcd405de4222b72dd8dc1e1e502" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=kwlINH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=kwlINH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=oApXnh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=oApXnh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=UEVYAh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=UEVYAh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=BEUokH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=BEUokH" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=IBZcBH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=IBZcBH" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=ijOkQh"><img src="http://feeds.wired.com/~f/wired/politics/security?i=ijOkQh" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=kWK2Ph"><img src="http://feeds.wired.com/~f/wired/politics/security?i=kWK2Ph" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=E6CgpH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=E6CgpH" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/285018670" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/285018672" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 06 May 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/amounts">amounts</category>
      <category domain="http://securityratty.com/tag/release explosive amounts">release explosive amounts</category>
      <category domain="http://securityratty.com/tag/release">release</category>
      <category domain="http://securityratty.com/tag/metal">metal</category>
      <category domain="http://securityratty.com/tag/hollow metal cone">hollow metal cone</category>
      <category domain="http://securityratty.com/tag/explosive">explosive</category>
      <category domain="http://securityratty.com/tag/energy">energy</category>
      <category domain="http://securityratty.com/tag/reliably release energy">reliably release energy</category>
      <category domain="http://securityratty.com/tag/metal liner">metal liner</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/285018672/reactive_revolutions">In Next-Gen Bullets and Bombs, Even the Casing Explodes</source>
    </item>
    <item>
      <title><![CDATA[Malware Embedded Link at Pod-Planet]]></title>
      <link>http://securityratty.com/article/0e914ec984876d21f37e877acff0b2c6</link>
      <guid>http://securityratty.com/article/0e914ec984876d21f37e877acff0b2c6</guid>
      <description><![CDATA[The &quot; the World's largest Podcast Directory &quot; is currently embedded with a malicious link, whereas thankfully the campaign's already in an undercover phrase and stopped responding over the weekend....]]></description>
      <content:encoded><![CDATA[<a href="http://bp2.blogger.com/_wICHhTiQmrA/R7j11ad7ljI/AAAAAAAABXo/dQGXQ4NEXAc/s1600-h/pod_planet_malware.jpg"><img id="BLOGGER_PHOTO_ID_5168150870394377778" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/_wICHhTiQmrA/R7j11ad7ljI/AAAAAAAABXo/dQGXQ4NEXAc/s200/pod_planet_malware.jpg" border="0" /></a>The "<em>the World's largest Podcast Directory</em>" is currently embedded with a malicious link, whereas thankfully the campaign's already in an undercover phrase and stopped responding over the weekend. The embedded link points to <strong>ame8.com/a.js</strong> (222.73.254.56) then loads <strong>ame8.com/app/helptop.do</strong>, once deobfuscated attempts to load <strong>ame8.com/app/cc.do</strong> as well as <strong>51.la/?1587102</strong> acting as the counter for the campaign. In case you remember, the web counter services offered by <strong>51.la</strong> were also used in the <a href="http://ddanchev.blogspot.com/2007/10/cisrt-serving-malware.html">malware embedded attack</a> at Chinese Internet Security Response Team. And with <strong>ame8.com</strong> hosted in China, someone's either engineering a situation where we're supposed to believe it's <a href="http://ddanchev.blogspot.com/2007/09/chinas-cyber-espionage-ambitions.html">Chinese malicious parties</a> behind it, thereby taking advantage of the media buzz, or it's <a href="http://ddanchev.blogspot.com/2007/12/inside-chinese-underground-economy.html">Chinese attackers</a> for real. For this particular case however, I'd go for the second scenario.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2T1aSVE"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2T1aSVE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2940OhE"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2940OhE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=GjiS2Ye"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=GjiS2Ye" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=L6RsvDe"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=L6RsvDe" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=5vbEGYE"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=5vbEGYE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=4lWBuVE"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=4lWBuVE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=0Vxodoe"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=0Vxodoe" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/236759567" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 17 Feb 2008 18:14:21 +0000</pubDate>
      <category domain="http://securityratty.com/tag/link">link</category>
      <category domain="http://securityratty.com/tag/loads ame8">loads ame8</category>
      <category domain="http://securityratty.com/tag/ame8">ame8</category>
      <category domain="http://securityratty.com/tag/load ame8">load ame8</category>
      <category domain="http://securityratty.com/tag/web counter services">web counter services</category>
      <category domain="http://securityratty.com/tag/counter">counter</category>
      <category domain="http://securityratty.com/tag/chinese malicious parties">chinese malicious parties</category>
      <category domain="http://securityratty.com/tag/malicious link">malicious link</category>
      <category domain="http://securityratty.com/tag/campaign">campaign</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/236759567/malware-embedded-link-at-pod-planet.html">Malware Embedded Link at Pod-Planet</source>
    </item>
  </channel>
</rss>
