« previous next »
Pages: [1]   Go Down

Author Topic: Alina-3 cybercrime trojan site not flagged? Totalhash confirms!  (Read 1755 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33923
  • malware fighter
Alina-3 cybercrime trojan site not flagged? Totalhash confirms!
« on: April 30, 2014, 07:04:25 PM »
See: www.222andro. dot net,5.199.168.152,,Criminals,  means that kraken's Virus Tracker has found active and up malware on site!
Missed altogether here: https://www.virustotal.com/nl/url/d40c5308901459fc698231d8c95f8b62263a6955fc5355731c74c6a638217841/analysis/
Totalhash comes up with this for mentioned IP: http://totalhash.com/search/ip:5.199.168.152
First identified 3 weeks ago and last seen 0 minutes ago Lithuania and last seen 118 minutes ago as Threat MODIFIED ITAR, danger level 1.
Win.Trojan.Alina-3 -> http://totalhash.com/analysis/b4fcc660a22ec1005712787e2a5f1e691534baa2  packer Microsoft Visual C++ 8
See: http://urlquery.net/report.php?id=1398877002400   (excessive header warning and clickjacking warning)
Interesting vulnerability report for x-powerd by PHP/5.4.4-14+deb7u8 : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736494

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37552
  • Not a avast user
Re: Alina-3 cybercrime trojan site not flagged? Totalhash confirms!
« Reply #1 on: April 30, 2014, 07:13:18 PM »
« Last Edit: April 30, 2014, 07:14:59 PM by Pondus »
Logged
Pages: [1]   Go Up
« previous next »