[<prev] [next>] [day] [month] [year] [list]
Message-ID: <52D27B422F179D46B08B5A6117E760FA01E41925@exchange.greatnet.local>
Date: Mon, 15 Feb 2010 16:58:28 +0100
From: "Boris Trenn" <bt@...atnet.de>
To: <full-disclosure@...ts.grok.org.uk>
Subject: Re: Georgia government sites hacked (and
spreadingmalware)
Looks like the still work on it, meanwhile only the batik.php is avail.
Or something other deleted it with the phpshell inside :-)
-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of
dd@...uri.net
Sent: Montag, 15. Februar 2010 16:27
To: full-disclosure@...ts.grok.org.uk
Subject: [Full-disclosure] Georgia government sites hacked (and
spreadingmalware)
A few sites from the Georgia .gov have been attacking our honeypots...
Some analysis:
http://blog.sucuri.net/2010/02/georgia-government-sites-hacked-and.html
Thanks,
--dd
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists