Re: [PL-227215] Malware files on dasdasd2342.googlecode.com

2015-03-10 Thread 'Mike Epstein' via Project Hosting on Google Code
This has been taken down.

On Mon, Mar 9, 2015 at 2:46 AM, s...@phishlabs.com wrote:

 Our company investigates computer crime incidents on behalf of banks and
 other companies.

 The following URL(s) are being used as part of a malware (computer virus)
 attack.


 hXXp dasdasd2342 [dot] googlecode [dot] com/svn/Horny_Video [dot] scr


 173.194.64.82 - oa-in-f82.1e100.net


 We kindly request your help to investigate and stop this attack.  If
 possible, we would be grateful for the following actions:

 - If the criminals hired your service, please provide login access to
 the dedicated, VPS, or shared hosting service used for this attack.
 - If the hosting account has been hacked by the attackers or you
 cannot provide access to the server, please provide copies of all malicious
 files, programs, PHP scripts, and a mysql database dump of any databases
 used by the attackers.  Also, please send web server and ftp server logs
 for access to criminal files and programs.  Please contact us for FTP
 instructions, if needed.

 Finally, we request that all hacker files and malware files be disabled or
 removed from the system(s) as soon as possible.

 If we have contacted you in error, or there is a better way for us to
 report this incident, please let us know.

 Thank you,

 Olivia Vining
 PhishLabs Security Operations
 s...@phishlabs.com
 +1.202.386.6001
 http://www.phishlabs.com/


 Evidence:

 hXXp www [dot] virustotal [dot]
 com/en/url/366639c72da364621937111514f0f994687d9f3e0a8395b61440f1e2f53654ea/analysis/

 --
 You received this message because you are subscribed to the Google Groups
 Project Hosting on Google Code group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to google-code-hosting+unsubscr...@googlegroups.com.
 To post to this group, send email to google-code-hosting@googlegroups.com.
 Visit this group at http://groups.google.com/group/google-code-hosting.
 For more options, visit https://groups.google.com/d/optout.


-- 
You received this message because you are subscribed to the Google Groups 
Project Hosting on Google Code group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-code-hosting+unsubscr...@googlegroups.com.
To post to this group, send email to google-code-hosting@googlegroups.com.
Visit this group at http://groups.google.com/group/google-code-hosting.
For more options, visit https://groups.google.com/d/optout.


[PL-227215] Malware files on dasdasd2342.googlecode.com

2015-03-10 Thread soc
Our company investigates computer crime incidents on behalf of banks and other 
companies.

The following URL(s) are being used as part of a malware (computer virus) 
attack.


hXXp dasdasd2342 [dot] googlecode [dot] com/svn/Horny_Video [dot] scr


173.194.64.82 - oa-in-f82.1e100.net


We kindly request your help to investigate and stop this attack.  If possible, 
we would be grateful for the following actions:

- If the criminals hired your service, please provide login access to the 
dedicated, VPS, or shared hosting service used for this attack.
- If the hosting account has been hacked by the attackers or you cannot 
provide access to the server, please provide copies of all malicious files, 
programs, PHP scripts, and a mysql database dump of any databases used by the 
attackers.  Also, please send web server and ftp server logs for access to 
criminal files and programs.  Please contact us for FTP instructions, if needed.

Finally, we request that all hacker files and malware files be disabled or 
removed from the system(s) as soon as possible.

If we have contacted you in error, or there is a better way for us to report 
this incident, please let us know.

Thank you,

Olivia Vining
PhishLabs Security Operations
s...@phishlabs.com
+1.202.386.6001
http://www.phishlabs.com/


Evidence:

hXXp www [dot] virustotal [dot] 
com/en/url/366639c72da364621937111514f0f994687d9f3e0a8395b61440f1e2f53654ea/analysis/

-- 
You received this message because you are subscribed to the Google Groups 
Project Hosting on Google Code group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-code-hosting+unsubscr...@googlegroups.com.
To post to this group, send email to google-code-hosting@googlegroups.com.
Visit this group at http://groups.google.com/group/google-code-hosting.
For more options, visit https://groups.google.com/d/optout.