in gaz we trust

[c0ldshadow]

Dancho Danchev's Blog - Mind Streams of Information Security Knowledge: GazTranzitStroyInfo - a Fake Russian Gas Company Facilitating Cybercrime

 

[Tech_Junkie]

Should we add these sites to our host file?

 

[pseudolobster]

Should we add these sites to our host file?

Nah, I wouldn't be too worried. The article was published a year ago, and as far as I can tell the sites are all dead by now. Also, firefox has almost all of them blocked by default anyway (see pic).

These sites never seem to last more than a week, they just keep registering more every day. Just never click on anything that points to vqxwnzf.cn or whatever.

Oh, and if you want a good host file, check out http://www.mvps.org/winhelp2002/hosts.txt

For more info about the cybercrime syndicate behind these things, check out: Russian Business Network - Wikipedia, the free encyclopedia and Russian Business Network (RBN)

If you want a list of RBN IP's to add to your firewall, check this out: http://www.emergingthreats.net/rules/rbn-ips.txt (apparently it's updated daily.)

 

[Tech_Junkie]

Cool, thanks PL.