[nsp-sec] spyeye infected drones - ACK 2119 & 8434

[Helge Aksdal]

* Dirk Stander (2011-03-17 15:18):

> ----------- nsp-security Confidential --------
> 

> Hi Teams,
> 
> please find attached a list of drones, which contacted one of the
> domains mentioned here:
> http://ddanchev.blogspot.com/2011/03/more-spamvertised-dhl-notifications.html
> 
> The drones are using a unique User-Agent string, "Opera/10.80 Pesto/2.2.30"

ACK for 2119 and 8434. Thanks for sharing!

-- 
Helge Aksdal 
Telenor