SUBSIM Radio Room Forums

SUBSIM Radio Room Forums (https://www.subsim.com/radioroom/index.php)
-   General Topics (https://www.subsim.com/radioroom/forumdisplay.php?f=175)
-   -   Every one of these sites is infected (https://www.subsim.com/radioroom/showthread.php?t=135715)

SUBMAN1 04-24-08 10:07 AM

Every one of these sites is infected
 
http://search.yahoo.com/search;_ylt=...t-501&ei=UTF-8

Too funny - even the EPA, United Nations, and UK's Civil Service all seem to have been hacked! This nihaorr1 malware javascript redirect is on all of them!

-S

SUBMAN1 04-24-08 10:12 AM

Just saw that cancer.gov is also infected.

Mapquest is infected!

Just saw Microsoft too.

-S

AVGWarhawk 04-24-08 10:26 AM

Lucky for me I stick the the porn sites. I expect this from them. No surprises.

SUBMAN1 04-24-08 10:41 AM

Quote:

Originally Posted by AVGWarhawk
Lucky for me I stick the the porn sites. I expect this from them. No surprises.

:rotfl::rotfl::rotfl:

-S

STEED 04-24-08 10:43 AM

Quote:

Originally Posted by AVGWarhawk
Lucky for me I stick the the porn sites. I expect this from them. No surprises.

Are you wearing a rain coat?

FIREWALL 04-24-08 10:57 AM

Quote:

Originally Posted by AVGWarhawk
Lucky for me I stick the the porn sites. I expect this from them. No surprises.


:rotfl: :up: :rotfl: :up: :rotfl: :up:

AVGWarhawk 04-24-08 10:59 AM

Quote:

Originally Posted by STEED
Quote:

Originally Posted by AVGWarhawk
Lucky for me I stick the the porn sites. I expect this from them. No surprises.

Are you wearing a rain coat?

How did you guess:o

Zayphod 04-24-08 02:56 PM

Quote:

Originally Posted by SUBMAN1
http://search.yahoo.com/search;_ylt=...t-501&ei=UTF-8

Too funny - even the EPA, United Nations, and UK's Civil Service all seem to have been hacked! This nihaorr1 malware javascript redirect is on all of them!

-S

Send info back to the mothership:

Domain Name: NIHAORR1.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: DNS.51YM.COM
Name Server: DNS1.51YM.COM
Status: ok
Updated Date: 11-apr-2008
Creation Date: 11-apr-2008
Expiration Date: 11-apr-2009

Go to http://groups.google.com/ and do a search for XIN NET TECHNOLOGY
and you'll see 1380 hits on them. They're the registrar of choice for the viagra
and fake watch spams going out now. There's also a theory going around in
news.admin.net-abuse.email that xin net is actually the hand of the Russian
Business Network criminal network.

Xin Net Technology link:http://tinyurl.com/5uw2sf

http://www.spamhaus.org/rokso/searchresults.lasso
http://www.spamhaus.org/rokso/eviden...kso_id=ROK6158


All times are GMT -5. The time now is 01:21 AM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Copyright © 1995- 2025 Subsim®
"Subsim" is a registered trademark, all rights reserved.