MalwareDomainsBlocklists - archived updates

MalwareDomains updated - 2011.10.14...

FYI...

DNS Sinkhole 10/14 Update: 129 New Domains
- http://www.malwaredomains.com/wordpress/?p=2127
October 15th, 2011 - "Added 129 domains associated with RBN, moneymule, malspam and other malicious activity you don’t want on your personal computer or network. Sources: emergingthreats.net, blog.dynamoo.com, labs.m86security.com and others..."

:fear:
 
MalwareDomains updated - 2011.10.25...

FYI...

SQLi, Fastflux Botnet, Dirt Jumper and more
- http://www.malwaredomains.com/wordpress/?p=2143
October 25th, 2011 - "Added -210- domains associated with SQLi, Dirt Jumper, RBN, fast flux botnets and other maliciousness. Sources include blog.dynamoo.com, ddanchev.blogspot.com, malwareurl.com and others..."

:fear::fear:
 
MalwareDomains updated - 2011.11.05...

FYI...

black hole exploitkit, zeroaccess & other harmful domains
- http://www.malwaredomains.com/wordpress/?p=2166
November 5th, 2011 - "Added -118- domains associated with the Black Hole Exploit Kit, Zero Access, and other risky and harmful domains. Sources:malwareurl.com, zeustracker.abuse.ch, vxvault.siri-urz.net and others..."

:fear:
 
MalwareDomains updated - 2011.11.14...

FYI...

Immortal malware domains...
- http://www.malwaredomains.com/wordpress/?p=2180
November 14th, 2011 - "... recertification of -237- long-lived, “immortal” malware domains... These are domains which continue to actively serve malware for months if not years. Some of these domains have been active here for more than two years. Of those 237 domains, 34, or less than 15% were removed. That means that over 85% of these long-lived domains are truly “bulletproof”, and have remained actively malicious for over two years... List of these “immortals” is here:
- http://mirror2.malwaredomains.com/files/immortal_domains.txt

:mad: :mad:
 
MalwareDomains updated - 2011.11.21...

FYI...

Malvertisers, Zeus, BH Exploit Domains…
- http://www.malwaredomains.com/wordpress/?p=2196
November 21st, 2011 - "Malicious domains associated with trojans, backdoors, BH Exploit Kit, RBN malvertisments were added. Sources include malwareurl.com, xylibox.blogspot.com, scrapbook.zscaler.com, malc0de.com..."
___

- http://www.malwareurl.com/
Total domains: 251677
Total IP addresses: 42006

- http://xylibox.blogspot.com
Midlet URL's...
Landing URL's...
Screenshots ...
"... According to VirusTotal, 15 AV detect these JAR files as Java/SMSSend... And only 10 AV detect these APK files as Android/FakeInst..."

- http://www.malwaredomainlist.com/mdl.php
Page 0 1 ... 38 !

- http://scrapbook.zscaler.com/
"... a lot of emails with attachments like: Facebook_Password_#8071.zip
where the number changes to avoid spam detection.
The email message looks like:
From: "Facebook"
Subject: Facebook Service# Your account has been blocked! Order/1721..."

- http://www.blog.malc0de.com/category/malware/
"... link domains that were serving the same executable. What I found out in a very short period of time is the binaries are updated so frequently that this becomes almost impossible... made a few adjustments to the database which should speed up the queries... here we can find a domain hosting the Neosploit exploit pack. The domain is hosted on 75 .125.212 .58. By searching malwaregroup.com* we can see domains hosted on the same IP that are named in a similar fashion and are most likely also hosting Neosploit or being staged..."
* http://www.malwaregroup.com/ipaddresses/details/75.125.212.58
... 21844 THEPLANET-AS21844:
> http://www.google.com/safebrowsing/diagnostic?site=AS:21844
"... over the past 90 days, 7863 site(s)... served content that resulted in malicious software being downloaded and installed without user consent. The last time Google tested a site on this network was on 2011-11-23, and the last time suspicious content was found was on 2011-11-23... we found 406 site(s) on this network... that appeared to function as intermediaries for the infection of 1619 other site(s)... this network has hosted sites that have distributed malicious software in the past 90 days. We found 834 site(s)... that infected 7709 other site(s)..."

:fear::mad::fear:
 
Last edited:
You must log in or register to reply here.
Back
Top