Yet another... https://code.google.com/p/flvplayertome1/source/browse/
I think you should somehow ban this guy: https://code.google.com/u/103931731473222879466/ I guess you can see the list of URLs that are redirected to these malicious files but here is one of them: hxxp:// www[.]agentofex [.]com/dl[.]php I have also sent an abuse report to the hosting & registrar (~20 hours ago) but they haven't replied yet. Btw, I don't know if you have any system that detects these kind of malicious files but you should consider implementing one. You should look inside every single file uploaded to your servers and get reports on suspicious files. You can also create a blacklist of files (simply based on their md5 or sha1 hash values) and check newly uploaded files against this list before releasing them to the internet. Cheers, - Salim. On Tue, Jan 7, 2014 at 7:50 PM, Jason Hall <[email protected]> wrote: > I've taken down the project, thanks. > > > On Tue, Jan 7, 2014 at 12:49 PM, Salim Sarımurat <[email protected] > > wrote: > >> Thank you! >> >> Another one: >> https://code.google.com/p/flvplayertome/source/browse/ >> >> - Salim. >> >> On Tue, Jan 7, 2014 at 5:48 PM, Augie Fackler <[email protected]> wrote: >> >>> Thanks, taken down. >>> >>> >>> On Tue, Jan 7, 2014 at 4:07 AM, Salim Sarımurat < >>> [email protected]> wrote: >>> >>>> Hi there, >>>> >>>> This guy is spreading malware: >>>> >>>> Started here: >>>> https://code.google.com/p/getyourkiss/source/list >>>> >>>> Moved here: >>>> https://code.google.com/r/info-nonamekiss/source/browse/ >>>> >>>> And now here: >>>> https://code.google.com/p/flvplayerinstant/source/browse/ >>>> >>>> All these executable files contain malware. Check VirusTotal report: >>>> >>>> https://www.virustotal.com/en/file/aca98f1c3a11881e51faa0783697b9a2fda3cff90229318813a255d4496dd152/analysis/1389080708/ >>>> >>>> >>>> Cheers, >>>> - Salim. >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Project Hosting on Google Code" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> >>>> To post to this group, send email to >>>> [email protected]. >>>> Visit this group at http://groups.google.com/group/google-code-hosting. >>>> For more options, visit https://groups.google.com/groups/opt_out. >>>> >>> >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "Project Hosting on Google Code" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected] >> . >> Visit this group at http://groups.google.com/group/google-code-hosting. >> For more options, visit https://groups.google.com/groups/opt_out. >> > > -- You received this message because you are subscribed to the Google Groups "Project Hosting on Google Code" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-code-hosting. For more options, visit https://groups.google.com/groups/opt_out.
