[nsp-sec] Yahoo malware distribution - he's back
Jon Lewis
jlewis at lewis.org
Mon Jun 27 13:43:49 EDT 2011
http://nacha-reports-domain[dot]com/cancelled-transaction.pdf.exe
;; ANSWER SECTION:
nacha-reports-domain.com. 1200 IN A 67.195.145.141
nacha-reports-domain.com. 1200 IN A 67.195.145.142
;; AUTHORITY SECTION:
nacha-reports-domain.com. 86400 IN NS yns2.yahoo.com.
nacha-reports-domain.com. 86400 IN NS ns8.san.yahoo.com.
nacha-reports-domain.com. 86400 IN NS ns9.san.yahoo.com.
nacha-reports-domain.com. 86400 IN NS yns1.yahoo.com.
----------------------------------------------------------------------
Jon Lewis, MCP :) | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
More information about the nsp-security
mailing list