[nsp-sec] ACK44038 ZeuS botnet (s288421667.onlinehome.us)

[Jan Boogman]

ACK 44038

Cheers
Jan

Am 09.06.2009 um 19:06 schrieb Dirk Stander:

> ----------- nsp-security Confidential --------
>
> Hi,
>
> please find attached a list of ~10k drones which used
> s288421667.onlinehome.us as a proxy for a ZeuS controller
> (next backend hop: http://www.sell-ads.cn/a1b8/s.php)
>
> Format is: ... | <epoch last seen> <uniq bot id (zip)> | ...
>
>    kind regards, Dirk Stander (1&1) :.
> <zeus-s288421667.onlinehome.us-cymru.txt>