Our readers sent us a copy of the new Casino Spam that points to Russia.
The Spam includes Phishing and Malware Sites.
<Sample>
From: “555″ <vidagbjbnkvpp@andrewsmemorial-umc.org>
To: Joe6@123x.com
Your 555USD bonus has just arrived, Claim it in here -
hxxp://stars-play-777.ru
———————————<>—————
Malware Site:
- hxxp://stars-play-777.ru
- Points to: 175.121.56.57
Malware Files Created:
- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4X23OP2B\royalpalaceca_03[1].jpg
- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4X23OP2B\royalpalaceca_06[1].jpg
Nameservers are via: castime.ru
ns1.castime.ru
ns2.castime.ru
ns3.castime.ru
ns4.castime.ru
IP 175.121.56.57 – Address Points to Multiple Domain Names:
- castime.ru
- *.extra-game-888.ru
- *.extragameslots.ru
- *.game-extra-lux.ru
- *.hot-game-888.ru
- 888-game-extra.ru
- eduinomed.in
- extra-game-888.ru
- extra-game-royal.ru
- extra-game-top.ru
- extragameslots.ru
- finmed.in
- game-extra-lux.ru
- game888extra.ru
- getrxpill.in
- gorxshop.in
- hankmed.in
- hansonline.in
- hot-game-888.ru
- hotgoldgame.ru
- jeddtab.ru
- maconline.in
- mortenmed.in
- newtonmed.in
- nollymed.in
- pharmhank.in
- robbymed.in
- salmed.in
- saymed.in
- tabluke.in
- tabwald.in
- viced.in
- vip-play-stars.ru
- vip-stars-play.ru
- www.extra-game-888.ru
- www.extragameslots.ru
- www.game-extra-lux.ru
- www.hot-game-888.ru
Reference: R obtex.com and MyWot
Advertisement
