Resolved Feedbuzz.info to 184.107.233.186 The extension comes in both firefox and chrome flavors Initial loading comes from a fake youtube page, http://video8244.uni.me The page is loaded from a dropbox account (/u/95827902/), and the extensions are loaded from epicrewards.net Here is the firefox extension source loadScript_you(); function loadScript_you() { if ('https:' == document.location.protocol) return false; varRead more...
space.legendteam.info(irc botnet hosted in Russian Federation Keyweb Ag)
Resolved : [space.legendteam.info] To [95.169.187.66] Remote Host Port Number space.legendteam.info 1234 NICK zax-CD1A-1A40 USER zaxbot “” “” :zaxbot JOIN #zax MODE #zax +l 3 hosting infos: http://whois.domaintools.com/95.169.187.66
d.theimagebook.com(irc botnet hosted in China Nanchang Chinanet Jiangxi Province Network)
Resolved : [d.theimagebook.com] To [117.21.226.243] Remote Host Port Number d.theimagebook.com 7081 PASS eee Nick ljkng ssrr hvorp “” “chc” :hvorp possible channels: PRIVMSG #dpi :Err0r.. Nick n{US|XPa}pgfvioh Channel #ng pass ng00 channel #us hosting infos: http://whois.domaintools.com/117.21.226.243