[Tor2web-talk] block ransomware url

tor2web at as250.net tor2web at as250.net
Tue Feb 3 12:16:32 CET 2015


Here goes another one...

Begin forwarded message:

Date: Tue, 03 Feb 2015 07:08:42 +0100
From: Thomas Morrison <thomas at spamhaus.org>
Subject: Chanitor botnet controllers @tor2web.org

We have identified three Chanitor botnet controller hosted in the Tor
network:

hXXps://o3qz25zwu4or5mak.tor2web.org/gate.php
hXXps://ho7rcj6wucosa5bu.tor2web.org/gate.php
hXXps://lctoszyqpr356kw4.tor2web.org/gate.php

Would it be possible to blacklist these domain on the tor2web gateway to
prevent that infected computers (bots) will be able to reach the botnet
C&C server?



More information about the Tor2web-talk mailing list