[nsp-sec] Yahoo malware distribution - he's back

Jon Lewis jlewis at lewis.org
Mon Jun 27 13:43:49 EDT 2011


http://nacha-reports-domain[dot]com/cancelled-transaction.pdf.exe

;; ANSWER SECTION:
nacha-reports-domain.com. 1200  IN      A       67.195.145.141
nacha-reports-domain.com. 1200  IN      A       67.195.145.142

;; AUTHORITY SECTION:
nacha-reports-domain.com. 86400 IN      NS      yns2.yahoo.com.
nacha-reports-domain.com. 86400 IN      NS      ns8.san.yahoo.com.
nacha-reports-domain.com. 86400 IN      NS      ns9.san.yahoo.com.
nacha-reports-domain.com. 86400 IN      NS      yns1.yahoo.com.


----------------------------------------------------------------------
  Jon Lewis, MCP :)           |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________



More information about the nsp-security mailing list