@briankrebs yes. Multiple pages infected on the latimes site. IT working the issue
hearing from multiple sources that a subdomain of http://latimes.com has been redirecting to blackhole exploit. anyone else seeing this?
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@briankrebs I see at least one hit at 'offersanddeals' subsite. -
@jindroush yeah, that's the one. offersanddeals. periodically pushing a php file that redir. to BHEK and ransomware. - Show replies
New conversation -
-
-
@briankrebs confirmed a few days agoThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@briankrebs News to me but will keep in mind. -
@randyknob heh, good one. - Show replies
New conversation -
-
-
@calvincs offersanddeals dot main domainThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@adamrbrand@briankrebs it will sound lame, but there's too many infected legit sites out there to be manually notified.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@adamrbrand@briankrebs There were some thoughts on it, but never get 'materialized' in any plan.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.