Gromozon: all you need to know
After some sleepless nights, and after quite a few warnings on my part about the nastiness, it seems something is definitely moving.The merit goes to Marco Giuliani of PrevX, who collected collected a few of the discoverings by me and other researches, but most importantly all his own discoverings (which are very detailed, and include great behavior analysis of the threat on an infected system).
Head on to Marco's pdf here.
Use this link if you have problems with the one above.
posted by TNT at 12:28
5 Comments:
This comment has been removed by a blog administrator.
Thanks ste.
Ste I deleted your comments just in case one who doesn't know what those domains are for tries to visit them.
I really appreciated that you posted them here and they were really helpful in finding out another new trojan repository.
Only, next time you might want to write in the post that those shouldn't be visited. :)
I forgot, excuse me, hope nobody tried them. If you mail me (ste at vogliaditerra dot com) your mail adress I'll send them next time by mail.
There's a new one wich ends the same way like the original gromozon one:
cv**s*jd.com/page.php?53100
nuova attacco massiccio con trackback sotto natale. La domain รจ "sffsdfwe.i*fo.
Post a Comment
<< Home