Thursday, January 10, 2008

CME711 Domains offline.

Steven Adair with Shadowserver is reporting that all the Stormworm domains have been marked NOT DELEGATED.

Randy V also performed some checks today and found the same thing. We're keeping a close eye on our honeypot to see if they change domains or if this is simply a smoke screen.

The authors were probably finished with the domains anyway, since its well passed the new year. The DISOG team is placing bets on the next rouse. I say adult rated material for February 14th (St. Valentines Day).

Domains that have been flagged and appear to be disabled:

i-halifax.com, i-barclays.com, newyearcards2008.com, happycards2008.com, uhavepostcard.com, merrychristmasdude.com, newyearwithlove.com, familypostcards2008.com, freshcards2008.com, hellosanta2008.com, happy2008toyou.com, happysantacards.com, hohoho2008.com, santawishes2008.com, santapcards.com, postcards-2008.com, parentscards.com

Labels: , , , , ,