Chachazz Posted August 16, 2005 Report Share Posted August 16, 2005 (edited) by Eagle1 @ Net-Integration: Posted: Aug 16 2005, 07:16 PM Net-Integration is not sending any spam but only appears to be doing so. The net-integration domain account account was disabled for the majority of the day while the source of the spamming was sought. The ISP (http://pisem.net) that is hosting malware was notified several hours ago and they have not done anything about it so far.Let it be clarified that Net-Integration does not appear to have been hacked which seems to be a widespread comment. Logs are being reviewed to determine if source can be identified and we will keep all posted.http://forums.net-integration.net/index.php?showtopic=32730****************************************************************Apparently net-Integration website/forums have been hacked and mass emails are being sent out from the webmaster ie:[email protected]Subject: Protect Your PC !!! ( From Net-Integration Forums )From: "Net-Integration Forums" <[email protected]>Date: Tue, 16 Aug 2005 09:03:20 -0400Protect Your PC !!!Please download antivirus protectionantivirusprotection.pisem.net/avp. Note: (.exe removed)which contians Trojan-PSW.Win32.LdPinch.gen (Kaspersky on line scan)Currently, attempting to contact N-I forums will result in "This Account Has Been Temporarily Suspended for Security Purposes" further details when available will be posted......Should you receive any such emails, immediately delete; do not open! Edited August 17, 2005 by Chachazz Quote Link to post Share on other sites
Guest tashi Posted August 16, 2005 Report Share Posted August 16, 2005 Apprantly mass emails have been sent out using N-I to do so.These emails are not legitimate mail from net-integration.Date 8-16-2005 prior to 11:00 AM CDTPlease do not open them! Delete them.Eagle1 has shut down the Board and is investigating, I will post more news as I receive it.Please understand I have a wide territory to cover and thank you for your patience.tashiNet-Integration Administrator. Quote Link to post Share on other sites
Chachazz Posted August 16, 2005 Author Report Share Posted August 16, 2005 Thank you very much tashi @TeMercAttention Net-Integration forum members!!!Several members of net-integration forums ( »forums.net-integration.net ) received multiple identical e-mails with a link to a trojan. Just a moment after I reported this issue, the forum got hacked.When run, this trojan copies itself to C:\Windows\csrss.exe and also drops the file C:\Windows\dll.dll. The actual trojan is a password stealer that will attempt to grab your ICQ, email account, dialup and other passwords. Any found passwords are mailed to two russian email addresses.If an Internet connection is available, the trojan will attempt to download and execute further files from a Hungarian web site. Unfortunately these files are no longer available and so could not be analyzed.All above quotes from this DSLR thread Quote Link to post Share on other sites
Chachazz Posted August 17, 2005 Author Report Share Posted August 17, 2005 by Eagle1 @ Net-Integration: Posted: Aug 16 2005, 07:16 PM Net-Integration is not sending any spam but only appears to be doing so. The net-integration domain account account was disabled for the majority of the day while the source of the spamming was sought. The ISP (http://pisem.net) that is hosting malware was notified several hours ago and they have not done anything about it so far.Let it be clarified that Net-Integration does not appear to have been hacked which seems to be a widespread comment. Logs are being reviewed to determine if source can be identified and we will keep all posted.http://forums.net-integration.net/index.php?showtopic=32730 Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.