Select Page

With thanks to Xavier for the help, here’s a quick follow up to my earlier posts here, here and here about the Vladzone malware gang spoofing legitimate sites.

We have more sites masquerading as legitimate ones. The following are run by the same group:

IP 207.226.177.244
Attrezzi biz
Foltax com
Master-x info
Siriusinter net
Slimcash com
Trasferimento biz

IP 209.8.151.190
Adslim com
Awmdev com
Gunbrethren com
Literaryaccess com
Nzpr com
Rosewedding net
Squareonerecords com
Tocsite com

And, one errant site, not necessarily Vladzone:

IP 216.255.179.140
dorifora com

Alex Eckelberry