AgentTesla botnet controller @95.163.212.79

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

AgentTesla botnet controller located at 95.163.212.79 on port 80 (using HTTP POST):
hXXp://nortonlilly.info/emma/inc/a92079a4564cf9.php

$ dig +short nortonlilly.info
95.163.212.79

$ nslookup 95.163.212.79
79.mcs.mail.ru

Опубликовано
В рубрике mail.ru

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *