Author Topic: What is this redirect? Going to malicious spam...  (Read 1669 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
What is this redirect? Going to malicious spam...
« on: March 15, 2013, 02:56:37 PM »
Get this in the browser
Quote
You will be redirected to process
We must complete few security checks to show your transfer details:
Be sure you have a transfer reference ID.
You will be asked to enter it after we check the link.

Important: Please be advised that calls to and from your wire service team may be monitored or recorded.
Redirecting to Complain details... Please wait...
htxp://basic-printers.com/kill/flashing-screens.php
This appeared on trying to go to this PHISH: htxp://pas-vzw.be/wp-content/themes/twentyten/lin_req.html
Going to a malicious spam alert: htxp://basic-printers.com/kill/flashing-screens.php
Read: http://gfisoftware.tumblr.com/post/45360746886/linkedin-connection-spam

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Re: What is this redirect? Going to malicious spam...
« Reply #1 on: March 15, 2013, 03:44:07 PM »
In firefox browsers NoScript extension will block the redirect and in Google Chrome browser the Netcraft extension will block this as
Quote
Suspected Malicious Page

This page has been blocked by the Netcraft Anti-Phishing Extension for the following reason:

Suspected Phishing

Blocked URL: htxp://pas-vzw.be/wp-content/themes/twentyten/lin_req.html
I also get an error: failure: <urlopen error [Errno -2] Name or service not known>
IP detection for misused server status LONG OVERDUE! -> http://support.clean-mx.de/clean-mx/phishing.php?ip=212.123.2.34&sort=id%20DESC

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!