SEARCH RESULTS
 
Showing 1-10 of 173 records
 
Expand article

Managed Fast Flux Provider - Part Two

The Article has images
2008-10-02 12:39:01 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast flux network consisting of RBN-alike purchased netblocks, and naturally, botnet infected hosts Managed fast-fluxing is only starting to go mainstream, for instance, in July I found evidence that money mule recruiters were using ASProx's infected hosts as hosting infrastructure , and in November, 2007, an infamous spamming software...
 
 
 
 
 
Expand article

Money Mule Recruiters use ASProx's Fast Fluxing Services

The Article has images
2008-07-18 06:23:49 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-flux infrastructure on behalf of the Asprox botnet, that is also providing hosting services for several hundred domains used on the last wave of SQL injection attacks. Ironically, the money mule recruitment site is sharing IPs with many of them. Who are these money launderers ( cashtransfers.tk ; cashtransfers.eu; type53.eu ; sid57.tk ;...
 
 
 
 
 
Expand article

Fast-Fluxing SQL Injection Attacks

The Article has images
2008-05-19 07:28:54 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-fluxing the SQL injected domains . Related URLs for this campaign banner82.com dll64.com aspx88.com bank11.net cookie68.com exportpe.net Read the complete assessment - Fast-Fluxing SQL Injection Attacks Executed from the Asprox Botnet , and go through previous posts related to the botnet as well - Phishing Emails Generating Botnet...
 
 
 
 
 
Expand article

Obfuscating Fast-fluxed SQL Injected Domains

The Article has images
2008-07-17 15:31:06 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-flux in the time of the SQL injection that several Chinese script kiddies were taking advantage of 6b%6b%36%2e%75%73 - kk6.us 73%61%79%38%2E%75%73 - s.see9.us 66%75%63%6B%75%75%2E%75%73 - fuckuu.us 61%2E%6B%61%34%37%2E%75%73 - a.ka47.us 61%31%38%38%2E%77%73 - a188.ws 33%2E%74%72%6F%6A%61%6E%38%2E%63%6F%6D - 3.trojan8.com...
 
 
 
 
 
Expand article

Airport Fast Pass Lets Redskins Fans Cut Security Line

2008-08-25 17:15:00 by Ryan Singel in Wired Security
 
Redskins fans can now pay $100 a year to get into the football stadium faster and to jump to the front of the security lines at airports around the country. Will fast-pass lanes be coming to retailers or fast-food joints soon
 
 
 
 
 
Expand article

IDC: TIBCO Leads Fast-Growing CEP Space

2008-09-24 21:29:15 by Tim Bass in The Complex Event Processing Blog
 
...fast-growing Complex Event Processing (CEP) space, according to a new report from IDC. TIBCO thus marked another year as the undisputed CEP leader, with a market share of 40.2 percent twice the share of its closest competitor-while experiencing 52 percent year-over-year growth, according to the IDC study CEP is the fastest-growing segment of...
 
 
 
 
 
Expand article

Norton AV 2009 is fast and resource lite?

2008-09-17 23:44:00 by Doug Woodall in The Spyware Biz Blog
 
...fast. We clicked one button and by the time wed Alt-tabbed between the installer, YouTube, and back again (about a minute) it had installed itself. Once up and running, the main menu displays a graph showing CPU activity and how much of that activity is down to Norton AntiVirus 2009. Typically, this hovered around the 5% mark, which isnt much...
 
 
 
 
 
Expand article

Update on the MySpace Phishing Campaign

The Article has images
2007-12-10 21:50:56 by HASH0x899feb4 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-flux can be greatly compared to that of Storm Worm's fast-flux networks in terms of its size. The updated campaign is also taking advantage of the following DNS servers Name Server: ns1.4980603.com Name Server: ns2.4980603.com Name Server: ns3.4980603.com Name Server: ns4.4980603.com Here's more coverage courtesy of the ISC assessing a...
 
 
 
 
 
Expand article

Asprox Phishing Campaigns Dominated in April

The Article has images
2008-05-27 06:38:48 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-flux and further expose and connection between these IPs and Asprox. For instance, 62.233.145.45 , is known to have been hosting xml52.com ; www5.yahoo.american-greeting.ca.xml52.com ; yahoo.americangreeting.ca.www05.net ; bendigobank.com.au.tampost5.ws ; among the domains used in some of the previous phishing domains. The rest of the...