[nsp-sec] ACK List of bots distributing infecting iframe

[SURFcert - Peter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tarmo Randel wrote on 30-10-2009 13:51:

> please find list of IP addresses involved in distributing drive-by URL
> hxxp: // lastanotherlife .ru :8080 / index.php via FTP. Timestamps are
> in GMT.

ACK 1103 and 1161.

- --
Peter Peters
SURFcert Officer off Duty
cert at surfnet.nl                            http://cert.surfnet.nl/
office-hours: +31 302 305 305    emergency (24/7): +31 622 923 564
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFK6uUqelLo80lrIdIRAuvHAJ9MAxzACgJCYtCnLfe2FAcLegF9NwCggZKK
3q2652YC/LpWuFx+QmlLjXw=
=Og5j
-----END PGP SIGNATURE-----