<<<
Saturday, March 10, 2007
>>>
 
Domain to drop Posted by Mikko @ 06:18 GMT

NAV2007

While looking at some incoming malware, we noticed a
trojan-downloader that downloaded additional malware from
www.norton-kaspersky.com. Very funny. We've seen a similar domain (norton-kaspersky.ru) used by other downloaders already in December.

If you're a sysadmin, you might want to filter your traffic to that domain.

The same IP also has other interesting hosts, including
www.spamh0use.com, www.norton-av2007.com,
and www.kusik-tusik-traff.com.






<<< Weekend Reading - March 9th
|
Apple Updates >>>