[Tor2web-talk] block ransomware url
Fabio Pietrosanti (naif) - lists
lists at infosecurity.ch
Sat Dec 13 09:36:15 CET 2014
We must start blocking the content of web pages in a more complex /
articulated way.
With 2-3 regexp, we would filter out most of the blackmailing sites out
of Tor2web.
We're just running against those fraudster, but they are faster than us
because they will always change their TorHS frequently than what we can
detect.
Fabio
On 12/12/14 9:42 PM, tor2web at as250.net wrote:
> On Fri, 12 Dec 2014 21:29:15 +0100
> Giovanni Pellerano <giovanni.pellerano at evilaliv3.org> wrote:
>
>> please block this url as soon as possible: 5kiuc45pat3qr6gd.onion
> same goes for: paytordmbdekmizq.onion (cryptolocker malware)
> and: r2bv3u64ytfi2ssf.onion (down atm, also possibly malware related)
>
More information about the Tor2web-talk
mailing list