tech support 9

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Friday, 8 February 2013

radarsky.biz and something evil on 5.135.67.160/28

Posted on 05:06 by Unknown


There is currently an injection attack redirecting visitors to a domains radarsky.biz (for example) hosted on 5.135.67.173 (OVH) and suballocated to:

inetnum:        5.135.67.160 - 5.135.67.175netname:        MMuskatov-FIdescr:          MMuskatovcountry:        FIorg:            ORG-OH6-RIPEadmin-c:        OTC15-RIPEtech-c:         OTC15-RIPEstatus:         ASSIGNED PAmnt-by:         
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Injection Attacks, Malware, OVH, Viruses | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • Registered Express Corporation (RGTX) pump and dump spam
    It's taken me a few days to get around to this due to moving house, but here's a new pump-and-dump spam run promoting a stock Regist...
  • "CEO Portal Statements & Notices Event" spam / report_{DIGIT[12]}.exe
    This fake Wells Fargo email has a malicious attachment: Date:      Fri, 16 Aug 2013 09:51:17 -0500 [10:51:17 EDT]From:      Wells Fargo Even...
  • ACH file ID "999.107" has been processed successfully spam / www.fiscdp.com.airfare-ticketscheap.com
    This fake FISC ACH spam leads to malware on www.fiscdp.com.airfare-ticketscheap.com: Date:      Tue, 10 Sep 2013 17:05:49 +0530 [07:35:49 ED...
  • USPS spam / Label_ZFRLOADD5PGGZ0Z_USPS.zip
    This fake USPS spam has a malicious attachment: Date:      Tue, 15 Oct 2013 09:36:02 -0500 [10:36:02 EDT]From:      USPS Express Services [s...
  • StumbleUpon spam / drugstorepillstablets.ru
    This fake StumbleUpon spam is something new, it leads to a fake pharma site on drugstorepillstablets.ru: Date:      Mon, 4 Feb 2013 01:01:46...
  • "Support Center" spam / phticker.com
    Not malware this time, but this fake "Support Center" spam leads to a fake pharma site at phticker.com: Date:      Mon, 11 Feb 201...
  • inukjob.com fake job offer (also ineurojob.com and hollandsjob.com)
    This fake job offer from inukjob.com involves illegal money laundering, and it also seems that the scammers want to use your identity for ...
  • Dealerbid.co.uk "Quotation.zip" spam with malicious VBS script
    The website dealerbid.co.uk has been compromised and their servers hacked in order to send spam to their customer list. Something similar ha...
  • Fake Staples spam leads to malware on tootle.us
    This fake Staples spam leads to malware on a site called tootle.us: Date:      Wed, 2 Oct 2013 08:40:11 -0500 [09:40:11 EDT]From:      suppo...
  • Laughable advanced fee fraud scam promises $2.5
    Two-and-a-half bucks? I think I'll pass. From:     Mr Anthony Freed [johnewele12@cantv.net]Reply-to:     dhlcorriadeliveryservice@live.c...

Categories

  • .SU
  • 1&1
  • 419
  • ADP
  • Advanced Fee Fraud
  • Advertising
  • Adware
  • AICPA
  • Amazon
  • Amerika
  • Android
  • Anti-Virus Software
  • AOL
  • Apple
  • Aruba
  • Australia
  • Austria
  • BBB
  • Black Hat
  • Blackhole
  • Blogging
  • Botnet
  • Brazil
  • Bulgaria
  • Canada
  • Chile
  • China
  • CNN
  • Colombia
  • CookieBomb
  • Crime
  • CyberBunker
  • Data Breach
  • DHL
  • DOC
  • Domains
  • Dynamic DNS
  • eBay
  • Edis
  • eFax
  • Egypt
  • Emailmovers Ltd
  • Endurance International Group
  • Estonia
  • Evil Network
  • EXE-in-ZIP
  • Facebook
  • Fail
  • Fake Pharma
  • False Positive
  • FedEx
  • Finland
  • France
  • Gandi
  • Germany
  • GHOSTnet
  • GoDaddy
  • Google
  • Greece
  • Hacked sites
  • Hetzner
  • HMRC
  • Hosting
  • Hungary
  • India
  • Injection Attacks
  • Intergenia
  • INTUIT
  • Iran
  • IRS
  • Israel
  • Italy
  • Japan
  • Job Offer Scams
  • Joe Job
  • Jolly Works Hosting
  • Kelihos
  • Kenya
  • Korea
  • Latvia
  • Law
  • Leaseweb
  • LinkedIn
  • Linode
  • Lithuania
  • Lithunia
  • logol.ru
  • Macintosh
  • Magnitude
  • Malware
  • Mea Culpa
  • Microsoft
  • Moldova
  • Money Mule
  • Mongolia
  • NACHA
  • NATO
  • Netherlands
  • Neutrino
  • Nuclear Fallout Enterprises
  • OVH
  • Pakistan
  • Patches
  • PayPal
  • Philippines
  • Phishing
  • Phishtank
  • Phones
  • Pinterest
  • Pizza
  • Poland
  • Politics
  • Porn
  • PPI
  • Printer Spam
  • Privacy
  • Pump and Dump
  • Retro
  • Romania
  • RU:8080
  • Russia
  • Sally Gaskell
  • Scam
  • Scams
  • Senegal
  • Serbia
  • Serverius
  • Sidharth Shah
  • Simply Transit
  • Singapore
  • Slicehost
  • SMS
  • South Africa
  • Spain
  • Spam
  • Stupidity
  • Sweden
  • Sweet Orange
  • Switzerland
  • Syria
  • Taiwan
  • Telepests
  • Thailand
  • TheFirst-RU
  • ThreeScripts
  • Tor
  • Turkey
  • UAE
  • UK2.NET
  • Ukraine
  • UPS
  • US Airways
  • USPS
  • VBScript
  • Virgin Media
  • Viruses
  • Waledac
  • Weather
  • Xeex
  • Yahoo
  • YouTube
  • Zbot
  • Zeus

Blog Archive

  • ▼  2013 (500)
    • ►  November (29)
    • ►  October (37)
    • ►  September (46)
    • ►  August (44)
    • ►  July (62)
    • ►  June (42)
    • ►  May (39)
    • ►  April (67)
    • ►  March (67)
    • ▼  February (60)
      • usanewwork.com fake job offer
      • "Contract of 09.07.2011" spam / forumny.ru
      • "Follow this link" spam / sidesgenealogist.org
      • "End of Aug. Statement" spam / forumusaaa.ru
      • US Airways spam / berrybots.net
      • Intuit spam / forumligandaz.ru
      • Facebook spam / lazaro-sosa.com
      • "TrustKeeper Vulnerabilities Scan Information" spa...
      • LinkedIn spam / greatfallsma.com and yoga-thegame.net
      • "Data Processing" spam / dekolink.net
      • "End of Aug. Stat." spam / forummersedec.ru
      • "Scan from a Xerox WorkCentre Pro" spam / familana...
      • ACH transaction spam / payment receipt - 884993762...
      • "Efax Corporate" spam / fuigadosi.ru
      • ADP Spam / faneroomk.ru
      • Verizon Wireless spam / participamoz.com
      • SendSecure Support spam / secure_message_02202013_...
      • "Wire transfer" spam / fulinaohps.ru
      • famagatra.ru injection attack in progress
      • Something evil on 62.212.130.115
      • USPS spam / USPS delivery failure report.zip
      • Cyberbunker fake pharma spam / 84.22.104.123
      • Something evil on 74.208.148.35
      • UPS Spam / emmmhhh.ru
      • Something evil on 67.208.74.71
      • Wire transfer spam / 202.72.245.146
      • "Cum Avenue" IRS Spam / azsocseclawyer.net
      • Malware sites to block 15/2/13
      • Intuit spam / epionkalom.ru
      • HP ScanJet spam / 202.72.245.146
      • "Copies of policies" spam / ewinhdutik.ru
      • HP ScanJet spam / eipuonam.ru
      • Something evil on 92.63.105.23
      • "First Foundation Bank Secure Email Notification" ...
      • NACHA spam / eminakotpr.ru
      • Malware sites to block 13/2/13
      • NACHA spam / thedigidares.net
      • Something evil on 192.81.129.219
      • Changelog spam / emaianem.ru
      • IRS spam / micropowerboating.net
      • eFax spam / estipaindo.ru
      • Something evil on 46.165.206.16
      • NACHA Spam / albaperu.net
      • British Airways spam / epianokif.ru
      • Something evil on 46.163.79.209
      • "Support Center" spam / phticker.com
      • ADP spam / 048575623_02082013.zip
      • BBB Spam / madcambodia.net
      • MMuskatov / OVH malware sites to block
      • radarsky.biz and something evil on 5.135.67.160/28
      • +20 3 2983245 telepest
      • FFIEC spam / live-satellite-view.net
      • inukjob.com fake job offer (also ineurojob.com and...
      • Amazon.com spam / salam-tv.com
      • 01530 561700: PPI refund cold callers are also PPI...
      • Phytiva / XCHC pump-and-dump
      • Something evil on 108.61.12.43 and 212.7.192.100
      • StumbleUpon spam / drugstorepillstablets.ru
      • Something evil on 50.116.40.194
      • Photos spam / eghirhiam.ru
    • ►  January (7)
Powered by Blogger.

About Me

Unknown
View my complete profile