Tuesday, 14 May 2013
Something evil on 94.242.198.16
Posted on 08:39 by Unknown
I'm not entirely sure what this is, I think it's an injection attack leading to a malware server on 94.242.198.16 (Root SA, Luxemburg) which is using various stealth techniques to avoid detection.
This is what I'm seeing.. code is getting injected into sites referring to [donotclick]fryzjer.me/hpoxqnj.php (report) or [donotclick]stempelxpress.nl/vechoix.php (report) which (if called in the
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment