2010년 10월 04일, ARP Spoofing 관련 도메인 및 유포사이트 정리

반응형
아실분들은 다 아실꺼니 괜찮고, 모르는 분들은 모자이크 앞부분만 구글링해도 확인 할 수 있음.
아직도 유포중인 사이트가 존재하여 부득이 하게 모자이크함!!

간단한 분석자료는 글 하단에 관련글에 있으니 그것으로 대신 보세요....^^

* 추가 된 사항은 빨간색으로 표시 함

- Domain List (yahoo.js -> img.js -> trim.js 로 변화중이다.)
http://www.1webweb.com/******/yahoo.js
http://www.1webweb.com/******/ad.htm
http://www.1webweb.com/******/news.html

http://www.xzjiayuan.com/**/yahoo.js
http://www.xzjiayuan.com/**/ad.htm
http://www.xzjiayuan.com/**/news.html

http://www.yxf.me/******/yahoo.js
http://www.yxf.me/******/ad.htm
http://www.yxf.me/******/news.html
http://www.yxf.me/******/hcp.html

http://www.nxgrain.net/***/yahoo.js
http://www.nxgrain.net/***/ad.htm
http://www.nxgrain.net/***/news.html

http://www.successtest.co.kr/*****/yahoo.js
http://www.successtest.co.kr/*****/ad.htm
http://www.successtest.co.kr/*****/news.htm

http://www.gamecollege.co.kr/zboard/****/yahoo.js
http://www.gamecollege.co.kr/zboard/****/ad.htm
http://www.gamecollege.co.kr/zboard/****/news.html
http://www.gamecollege.co.kr/zboard/****/hcp.html

http://www.800816.com.cn/*****/yahoo.js
http://www.800816.com.cn/*****/ad.htm
http://www.800816.com.cn/*****/news.htm

http://www.wangqiao365.com/***/yahoo.js
http://www.wangqiao365.com/***/ad.htm

http://www.sxpfxb.com/*****/news.html

http://www.chinacsrmap.org/******/yahoo.js
http://www.chinacsrmap.org/******/ad.htm
http://www.chinacsrmap.org/******/news.html

http://www.24hkgame.com/*****/yahoo.js
http://www.24hkgame.com/*****/ad.htm
http://www.24hkgame.com/*****/news.html

http://www.xzjiayuan.com/**/ad.htm
http://www.xzjiayuan.com/**/news.html
http://www.xzjiayuan.com/**/count1.html

http://www.kotoo.com/******/img.js 
http://www.kotoo.com/******/ad.htm
http://www.kotoo.com/******/news.html

http://www.liteflux.com/******/trim.js
http://www.e0570.com/******/img.js
http://www.e0570.com/******/ad.htm
http://www.e0570.com/******/news.html

- Malware List (파일명이 s.exe로 고정이 되는 듯 하다.)
http://www.mir3.me/******/s.exe
http://www.exinwl.com/******/s.exe
http://www.dadi518.com/******/s.exe
http://www.17oye.cn/******/s.exe
http://www.xdxny.com/*****/s.exe
http://www.jwsc.cn/******/s.exe
http://www.wangqiao365.com/***/s.exe
http://www.jz168.com/*******/s.exe
http://www.yangzhou-etdz.com/******/s.exe
http://www.chinaglass-expo.com/******/s.exe
http://www.txgjj.com/******/s.exe

- Support List (204.152.200.162라는 새로운 IP가 등장하였다.)
http://98.126.70.156***/s.txt
http://98.126.56.107***/s.txt
http://98.126.56.108***/s.txt
http://98.126.56.109:61688/***/img.txt
http://204.152.200.162:61688/***/img.txt
http://98.126.70.156***/ma.exe
http://98.126.56.107***/ma.exe
http://98.126.56.108***/ma.exe
http://98.126.70.156***/tt.exe
http://98.126.56.107***/tt.exe
http://98.126.56.108***/tt.exe
http://98.126.56.109:61688/***/1.exe
http://98.126.56.109:61688/***/2.exe
http://204.152.200.162:61688/***/1.exe
http://204.152.200.162:61688/***/2.exe






댓글(0)

Designed by JB FACTORY