Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Bleeding Snort Domain.

Published: 2006-08-01
Last Updated: 2006-08-01 18:08:04 UTC
by Kevin Hong (Version: 2)
0 comment(s)
The folks over at Bleeding Snort have released an alert titled "Domain Gone."  They owned the "bleedingsnort.org" domain, but the domain was inadvertantly allowed to expire and someone else purchased it and may be using it to distribute malware or other unwanted programs. The Bleeding Snort team provides lots of SNORT signatures and other useful security information. Their official web site is (and always has been) http://www.bleedingsnort.com.
 
Please, until we know more about what's behind it, do not visit the "bleedingsnort.org" site (or, if you do, be very careful).

Update:  We have confirmed that the .org site has been dropping malware (not identified by all A/V) in the last 24 hours, so chalk one up for the bad guys and cybersquatters. :(
Keywords:
0 comment(s)
Diary Archives