[nsp-sec] Compromised websites

[Anukrom Punyashthiti]

ACK 4765

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Thomas Hungenberg
Sent: Tuesday, July 10, 2012 21:27
To: nsp-sec
Subject: [nsp-sec] Compromised websites

----------- nsp-security Confidential --------

Hi,

please find below a list of websites that recently have been found
compromised by Symantec.
The attackers uploaded a malicious .htaccess to redirect users to sites
spreading Trojan.Milicenso.

See this report for more information:
http://www.symantec.com/connect/blogs/trojanmilicenso-infection-through-htac
cess-redirection


Format: ASN | CC | IP | hostname | AS name
  4765 | TH | 61.47.10.243    | www.s-rna.ac.th           | WORLDNET-AS
World Net & Services Co., Ltd.
  4765 | TH | 61.47.47.34     | www.maskprocanopy.com     | WORLDNET-AS
World Net & Services Co., Ltd.