[nsp-sec] Ping Yahoo!

Zane Jarvis zane at auscert.org.au
Wed Sep 14 21:06:02 EDT 2011


Hi guys,

The following domains are being hosted on IP Address 67.195.140.36 (Yahoo!).
Can we please have these taken down? They are serving malware that is
targeting the Australian Taxation Office.

getaustralian-bussines.com
go-australianbussines.com
greataustralian-bussines.com
australianbussiness-today.com
australianbussinesstuff.com
great-australianbussines.com
australian-bussines-opps.com
day-australianbussiness.com
australian-businesssite-f.com
australianbusiness-store.com
australian-businesssite.com
australian-businesssite-4u.com
australianbusinesssite-au.com

Additionally, it seems the email account listed for abuse on the whois
(network-abuse at cc.yahoo-inc.com) autoresponds with a suggestion to use
abuse.yahoo.com which requires an account unless I missed the right link to
follow.

Thanks in advance,
Zane.


--
Zane Jarvis
Senior Information Security Analyst  | Hotline: +61 7 3365 4417
AusCERT, Australia's Leading CERT    | Fax:     +61 7 3365 7031
The University of Queensland         | WWW:     www.auscert.org.au
QLD 4072 Australia                   | Email:   auscert at auscert.org.au







More information about the nsp-security mailing list