PHP/C99SHELL & PHP/PBOT Infection ～Oct 20th

#MalwareMustDie #Hint
Sun Oct 21 18:15:48 JST 2012

================================================
PHP/PBot NEW Infections from Oct 17-Oct 20
Ref: h00p://malwaremustdie.blogspot.jp/2012/09/cracking-of-strong-encrypted-phpirc-bot.html
* Links are in the PhishingDB and Links in ITW
================================================
h00p://poshangelz.com/download/bogel.jpg
h00p://www.gorenergo.com/netcat/require/lib/Mail/pbbb.txt
h00p://ahopportunity.com/wp-includes/ddos.txt
h00p://nuker.host.org/pBot.txt?
h00p://xtremeimpulse.com/amazon/dd.gif
h00p://tmalltops.com/images/N7.jpg??


================================================
PHP/C99Shell NEW Infections from Oct 16-Oct 20
h00p://malwaremustdie.blogspot.jp/2012/10/how-far-phpc99shell-malware-can-go-from.html
* Links are in the PhishingDB and Links in ITW
================================================
h00p://zeero.cn/new/user.php
h00p://anoticia-to.com.br/img/parceiros/17.jpg
h00p://sh3ll.org/cyb3r-sh3ll.txt
h00p://crentech.com/wp-content/themes/gadget-story/test.php
h00p://picasa.com.7th-source.com/default.php
h00p://alumni.kpi.ua/images/stories/food/crew.jpg
h00p://sembon.nab.su/c9.gif

#MalwareMustDie