Emotet malware distribution @ [compromise website]

The host at this IP address is hosting a website that have been compromised by threat actors to distribute Emotet (aka Heodo) malware. The following URL is hosting a webshell that is being accessed by the threat actors programmatically to place malware on the website:

URL: http://lifenv.ru/wp-content/plugins/better-social-counter/js/JST10x.php
Host: lifenv.ru
IP address:
Hostname: ssl.fox.beget.com

В рубрике beget.ru

Добавить комментарий

Ваш адрес email не будет опубликован.