OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Full-disclosure] Is javascript-analytics.com related to mebroot ?

From: exploit dev (extraexploitgmail.com)
Date: Fri May 08 2009 - 04:09:00 CDT

Hello guys,
during my attempts to analyze mebroot I've been found a pedantic
exploiter that post on javacripts-analytics.com infected host info.
Can anyone give me a feedback about correlation between a strange
routes changing and an increasing of http request against the "info
collector web site" ? I have post something about it. If tou are
interested check http://extraexploit.blogspot.com

Thank you for your attention.

Regards.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/