[Tor2web-talk] block ransomware url

[Virgil Griffith]

I would argue to instead have a regular block list import from some
security company.

Unless someone wants to volunteer to keep up with those regexs.

-V


On Sat, Dec 13, 2014 at 12:36 AM, Fabio Pietrosanti (naif) - lists
<lists at infosecurity.ch> wrote:
> We must start blocking the content of web pages in a more complex /
> articulated way.
>
> With 2-3 regexp, we would filter out most of the blackmailing sites out
> of Tor2web.
>
> We're just running against those fraudster, but they are faster than us
> because they will always change their TorHS frequently than what we can
> detect.
>
> Fabio
>
> On 12/12/14 9:42 PM, tor2web at as250.net wrote:
>> On Fri, 12 Dec 2014 21:29:15 +0100
>> Giovanni Pellerano <giovanni.pellerano at evilaliv3.org> wrote:
>>
>>> please block this url as soon as possible: 5kiuc45pat3qr6gd.onion
>> same goes for: paytordmbdekmizq.onion  (cryptolocker malware)
>> and: r2bv3u64ytfi2ssf.onion (down atm, also possibly malware related)
>>
>
>
> _______________________________________________
> Tor2web-talk mailing list
> Tor2web-talk at lists.tor2web.org
> http://lists.globaleaks.org/mailman/listinfo/tor2web-talk