Feed

Storm Worm Valentines Day Spam

Posted on February 13th, 2008 in Domain News,Storm Worm by dglosser

The Internet Storm Center reports the destroythemoon.com and moonstarfood.com (fast-flux) are being used in the latest Storm Worm Valentine’s day spams. Will be added tonight, but you shouldn’t wait….

Update: block 987408.com as well. Sunbelt Blog reports spam with a link to this domain, containing a very nasty and dangerous trojan.

20 New Malicious Domains to Block

Posted on February 13th, 2008 in New Domains,Storm Worm by dglosser

From various sources:

aaakemegood24 (dot) com aaauaa (dot) info
agoga (dot) com blagoinc (dot) info
bzx (dot) cn cfm48 (dot) com
ddlsite (dot) com doginhispen (dot) com
fapparatus (dot) com freecodesource (dot) com
gicoupler (dot) com gxgxy (dot) net
hotbb (dot) cn makemegood24 (dot) com
micralokp (dot) biz my-nude-girl (dot) com
perfectchoice1 (dot) com portki (dot) info
skitodayplease (dot) com stabilt (dot) se
whataboutadog (dot) com

Help fight spyware: Join the Spyware Listening Post!

Updates are located at http://www.malwaredomains.com/updates
The full files are located at: http://www.malwaredomains.com/files

domains.txt file is the complete list along with original reference
BOOT file is in MS DNS format
spywaredomains.zones file is in BIND format