Author Topic: Hacked website on an abuse IP.  (Read 1050 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
Hacked website on an abuse IP.
« on: December 09, 2016, 12:11:18 AM »
See: http://killmalware.com/feuerwehr-gonzerath.de/#
The file analysis: https://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Ffeuerwehr-gonzerath.de%2F&ref_sel=GSP2&ua_sel=ff&fs=1
Defacement check:
Quote
gcolor=black onunload="alert('hacked by silo (ne bakiyon oyle:)');" text=#00ff00 vlink=#ff0000 alink=#00ffff link=#ffff0...
On the IP: https://www.threatcrowd.org/ip.php?ip=81.169.145.74  (various malware).
Appeared as bad host: https://www.projecthoneypot.org/ip_81.169.145.74
Threats: https://www.scumware.org/report/81.169.145.74

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!