SEARCH RESULTS
 
Showing 1-10 of 113 records
 
Expand article

Fast-Fluxing SQL Injection Attacks

The Article has images
2008-05-19 07:28:54 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-fluxing the SQL injected domains . Related URLs for this campaign banner82.com dll64.com aspx88.com bank11.net cookie68.com exportpe.net Read the complete assessment - Fast-Fluxing SQL Injection Attacks Executed from the Asprox Botnet , and go through previous posts related to the botnet as well - Phishing Emails Generating Botnet...
 
Tags: sql injection attacks, botnet, sql, asprox botnet, botnet masters, asprox, malware campaign, campaign, net
 
 
 
 
Expand article

Update on the MySpace Phishing Campaign

The Article has images
2007-12-10 21:50:56 by HASH0x899feb4 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-flux can be greatly compared to that of Storm Worm's fast-flux networks in terms of its size. The updated campaign is also taking advantage of the following DNS servers Name Server: ns1.4980603.com Name Server: ns2.4980603.com Name Server: ns3.4980603.com Name Server: ns4.4980603.com Here's more coverage courtesy of the ISC assessing a...
 
Tags: myspace, fast-flux networks, fast-flux, attack vectors include, campaign, server, attack, exploit content results, primary infection vectors
 
 
 
 
Expand article

Asprox Phishing Campaigns Dominated in April

The Article has images
2008-05-27 06:38:48 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-flux and further expose and connection between these IPs and Asprox. For instance, 62.233.145.45 , is known to have been hosting xml52.com ; www5.yahoo.american-greeting.ca.xml52.com ; yahoo.americangreeting.ca.www05.net ; bendigobank.com.au.tampost5.ws ; among the domains used in some of the previous phishing domains. The rest of the...
 
Tags: asprox, botnet, asprox botnet, previous, previous months, historical domains, ips, months, domains
 
 
 
 
Expand article

More CNET Sites Under IFRAME Attack

The Article has images
2008-03-06 10:50:57 by HASH0x8b1424c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast, appropriate credit is given , but not as fast as the IFRAME campaign targeting several more CNET Networks' web properties besides ZDNet Asia , namely, TV.com , News.com and MySimon.com which I'll assess in this post. In the time of posting this, no other CNET sites are involved in the campaign, including ZDNet's international sites such...
 
Tags: iframe, cnet sites, sites, iframe-ed pages, pages, cnet, iframe redirects, iframe campaign, campaign
 
 
 
 
Expand article

Storm Worm Hosting Pharmaceutical Scams

The Article has images
2008-05-30 14:50:06 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-flux provided by already infected hosts) hosting pharmaceutical scams producemorning.com pressrose.com posestory.com picturewe st.com lowsmell.com catsharp.com printlength.com All of the domain's DNS entries are set to update every 2 minutes, meaning they every 2 minutes another 20 different and infected IPs will be hosting the...
 
Tags: storm worm, storm, storm worm malware, malware, ssl encryption, ssl, lock, key lock, key
 
 
 
 
Expand article

Phishing Campaign Spreading Across Facebook

The Article has images
2008-06-20 17:35:37 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast-fluxed domains used in the campaign indicates it's a part of a botnet Sample messages spammed across Facebook hey, howdy?? oh lisen i got a new friend here shex kinda new on facebook..maybe you can give her a lil tym so she can enjoy here?? not forcin u but u can chk out i got a new friend here..shex kinda new here..maybe you can give...
 
Tags: facebook, campaign, phishers, info, myspace phishers, info facebookindex, myspace, profile, facebookindex
 
 
 
 
Expand article

Cached Malware Embedded Sites

The Article has images
2007-12-16 18:18:26 by HASH0x8a09e44 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...fast as Google's Therefore, don't put Google in the same row as Yahoo and MSN, since Yahoo and MSN do not provide such in-house built malware embedded sites notification services, and given the slow content crawling, it's among the top reasons why I love using their search engines given I'm aware of a malware embedded site, but couldn't...
 
Tags: sites, sites wrongly, web sites, malware, malicious site, site, single site offers, sites notification services, popular sites
 
 
 
 
Expand article

Moto Q9 DoS and Fingerprinting

2008-01-12 18:10:21 by RSnake in ha.ckers.org web application security lab
 
...fast. It kinda reminds me of what Windows95 used to be - usable but not fast. It has the new version of Microsofts mobile operating system on there with direct push on there (similar to Blackberry which saves battery life, Im sure, for real time email), a 2mega pixel camera, etc etc Fun little toy. So id and I were driving around town and I...
 
Tags: accept language, accept, devcap, devcap charset, devcap numsoftkeys, accept charset, devcap screenpixels, cell phone hacker, phone
 
 
 
 
Expand article

Terrible animal abuse caught on video at Westland/Hallmark meat company

2008-02-19 17:01:00 by John Sexton in The Bullet Proof Blog
 
...fast food restaurants and to schools to feed the nation's children Yesterday, two fast food chains: "Jack in the box' and "In-out burgers", stated that they were no longer purchasing beef products from Westalnd/Hallmark. Today, 150 school districts dropped the meat company as their vendor What is difficult to understand is how the company...
 
Tags: meat company, meat, video, yesterday, cnn video yesterday, fast food chains, low standards, fast food restaurants, unscrupulous business practices