[nsp-sec] Compromised websites

Torsten Voss voss at dfn-cert.de
Tue Jan 25 09:21:54 EST 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Thomas,

thanks for the hint.

ACK AS680

Cheers,
   Torsten


Am 25.01.2011 13:33, schrieb Thomas Hungenberg:
> ----------- nsp-security Confidential --------
> 
> Hi,
> 
> please find below a list of compromised websites that have (or recently had)
> an IFRAME pointing to <hXXp://80.91.191.158/stats/priemIframe.php?part=...> injected.
> 
> 
>      - Thomas
> 
> CERT-Bund Incident Response & Anti-Malware Team




- -- 
Dipl.-Ing.(FH) Torsten Voss (Incident Response Team), Phone +49 40 808077-634

DFN-CERT Services GmbH, https://www.dfn-cert.de, Phone  +49 40 808077-590
Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.:  DE 232129737
Sachsenstrasse 5, 20097 Hamburg/Germany, CEO: Dr. Klaus-Peter Kossakowski

Automatische Warnmeldungen               https://www.cert.dfn.de/autowarn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iQEVAwUBTT7cgiXNv0Upg26pAQI04ggAyiykN28r62XTOteBERjltLb7vErf4eNi
d/P/oJtLuEEZPiRTGR4H1W8AMTIh7KfKy45eUChGBv5rndBzMLkaF7TAQMa7ypCD
Jdd7PWcTXB12l4n4BtUrkuj6ZaYuE8NXif/2rb0oIE+CZSuBiJ8KhgG5sIgXJNYM
BUCYKhOrNnutNe5f0p1rXJ2QqvYs7vuh9wNtRfIzsH0NRrMJxg3Pmgqfql3kpIfB
4jtiy4U+7EmqZVaQvz5AbP6HcEsldJR3cGI4tilKpmIn8L6a+tFRj5gENHWP9q4F
yXRGU6y00NshjQerhbVZdxyJNU8vL+s9Doi8s2iTlm6mbDLCcCrvDw==
=WR4j
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list