Posts Tagged ‘words’
YouTube typo delivers IRC Bot
Fresh from our HoneyPot we discovered a malware site using a typo in its domain name. The site youtorube.com will push a fake video codec, on what appears to be a YouTube page (in Italian). The domain is registered to: Pretty soon after running the fake codec, I observed IRC traffic with the same IP address: This lets me know that I am part of an IRC channel: The IRC server’s IP (87.98.184.231) has some interesting connections, including a “p0nwed.de” domain

View original post here:
YouTube typo delivers IRC Bot