http://{BLOCKED}.130.35:8080/forum/viewtopic.php
Publish Date: 02 settembre 2013
Data/ora blocco URL: domenica 1 settembre 2013 20:20:00 GMT-8
Classificazione: : Alto
Dominio: : 198.57.130.35
Categoria: Disease Vector
Descrizione:
TSPY_FAREIT.AFM attempts to steal stored account information and other sensitive information and send the gathered information via HTTP POST to this URL. This FARFEIT variant is the final payload of a Blackhole Exploit Kit related spam run.