New Police scam domains Sep 10, 2013

Tue, Sep 10 2013
#DhiaLite - New Police scam, browser-based ransomware on these junk IPs 91.220.131.106 and 91.220.131.56, targeting the US, Spain, Sweden, Denmark, Germany, Netherlands, Switzerland, Italy

They prey on gullibe users, who will try first to close window, but Javascript pop-up makes user think his/her computer is locked. In fact, you need to click 150 times for the pop-up to go, or just Force kill process ;)
Simple Javascript sets a counter to number of iframe elements in the page. There are 150.
Pretty lame, but annoying for a simple person who might panic and possibly pay!
If you enter a MoneyPack 14 digits number, it is posted to l0756.com

Domains registered recently.

s4583.com 2013-09-01
e8679.com 2013-09-01
s2346.com 2013-09-01
r4325.com 2013-09-01
y4899.com 2013-09-01
i4568.com 2013-09-01
p8464.com 2013-09-01
s5473.com 2013-09-01
k7346.com 2013-09-01
i6468.com 2013-09-01
k5756.com 2013-09-01
s2678.com 2013-09-01

and l0756.com 2013-09-07

fbi.gov.id222223310-2793333840.p8464.com
fbi.gov.id249916657-3921776669.k5756.com
fbi.gov.id259020544-2481665314.r4325.com
fbi.gov.id271328836-1779061011.k7346.com
fbi.gov.id277464536-9665855677.e8679.com
fbi.gov.id308111422-4616828857.k5756.com
fbi.gov.id313055094-1496975947.s5473.com
fbi.gov.id373836410-8787068261.s2346.com
fbi.gov.id388752059-8682421554.s2346.com
fbi.gov.id396681884-2073759607.y4899.com
fbi.gov.id415778258-6040437083.e8679.com
fbi.gov.id426775757-1335842726.k5756.com
fbi.gov.id502156917-7617252119.k5756.com
fbi.gov.id508330638-4643431073.k7346.com
fbi.gov.id526318728-7242908038.s2346.com
fbi.gov.id558544521-9431404948.r4325.com
fbi.gov.id573340108-2009471088.s2346.com
fbi.gov.id643582655-2043275052.k5756.com
fbi.gov.id669016767-7694595640.s4583.com
fbi.gov.id673520834-4211868730.i6468.com
fbi.gov.id679254038-7793641053.p8464.com
fbi.gov.id713102147-9974405175.y4899.com
fbi.gov.id730122136-5590615791.r4325.com
fbi.gov.id760578247-2033050492.i4568.com
fbi.gov.id814216347-3493974985.i6468.com
fbi.gov.id825457673-8866372280.r4325.com
fbi.gov.id850643164-2907657367.i4568.com
fbi.gov.id856002918-7221754277.s5473.com
fbi.gov.id940424573-9307750557.k7346.com
fbi.gov.id981371814-7921115727.s2346.com
fbi.gov.id994758763-6973498260.k5756.com
fbi.gov.id554204336-6323186002.s2678.com
fbi.gov.id222383440-2516460547.s2678.com
fbi.gov.id845963953-5839490137.y4899.com
fbi.gov.id382170628-5091154890.i6468.com
fbi.gov.id578027025-9704636752.y4899.com
fbi.gov.id505750671-4560171366.s2346.com
fbi.gov.id341156174-3342731341.y4899.com
fbi.gov.id883947679-9685235563.i4568.com
fbi.gov.id844164566-4716365575.s2346.com
fbi.gov.id559591356-8696345597.e8679.com
fbi.gov.id228139156-2870425280.p8464.com
fbi.gov.id359426713-6042186914.y4899.com
fbi.gov.id412620636-4621131145.p8464.com
fbi.gov.id492616051-5869820372.r4325.com
fbi.gov.id527037036-7156561402.s5473.com
fbi.gov.id645901835-3824276951.k5756.com
fbi.gov.id887236133-7132737099.i6468.com
fbi.gov.id278879616-8961234130.s5473.com
policia.es.id538900856-5518986335.k7346.com
policia.es.id803311046-2390508312.y4899.com
polisen.se.id235499109-6569959172.i4568.com
politi.dk.id172780928-7658357417.e8679.com
politi.dk.id321330359-7181669971.r4325.com
polizei.de.id247164942-5302380665.e8679.com
polizei.de.id892886288-1912789360.p8464.com
polizei.de.id969561449-1853418223.i6468.com
polizei.de.id134419647-5643986277.k5756.com
polizei.de.id480603198-6025225211.e8679.com
politie.nl.id198980946-5201141725.i4568.com
polizei.ch.id342750523-2115760682.p8464.com
polizia-penitenziaria.it.id600236495-7866187594.i4568.com
polizia-penitenziaria.it.id429985680-3075335621.s2346.com
polizia-penitenziaria.it.id757240047-5663528441.e8679.com
polizia-penitenziaria.it.id602086911-4615326749.e8679.com
polizia-penitenziaria.it.id150823599-3854976195.s2346.com
polizia-penitenziaria.it.id197820755-9315312995.e8679.com
polizia-penitenziaria.it.id877172612-5683561563.i6468.com
polizia-penitenziaria.it.id114911417-2101353255.s2678.com
polizia-penitenziaria.it.id182162873-5488898542.s2346.com
polizia-penitenziaria.it.id203616904-7167677226.s2678.com
polizia-penitenziaria.it.id380594163-8055496557.s2678.com
polizia-penitenziaria.it.id473210477-5087176709.k5756.com
polizia-penitenziaria.it.id567089110-6764567208.s4583.com
polizia-penitenziaria.it.id648047582-9701605609.y4899.com
polizia-penitenziaria.it.id735415643-7008320646.y4899.com
polizia-penitenziaria.it.id887265331-7003197858.s2346.com
polizia-penitenziaria.it.id898639590-6811021354.s5473.com
polizia-penitenziaria.it.id761681740-7571029490.i4568.com
polizia-penitenziaria.it.id294661154-7777425121.s5473.com

END