Comments on: Malicious Site Analysis for dota11.cn injection http://www.sudosecure.net/archives/83 is anything truly secure... Fri, 05 Dec 2008 16:06:01 +0000 http://wordpress.org/?v=abc By: Mike http://www.sudosecure.net/archives/83#comment-116 Mike Sat, 16 Aug 2008 07:05:17 +0000 http://www.sudosecure.net/?p=83#comment-116 Now I'm no techy, but this mentioned .cn domain site link has replaced my profile information on an international penpal website. Seems strange, my email account has also been hacked by somebody who is now sending out emails with .cn links, not to mention the daily pile of spam sent with .cn links. Hotmail has been contacted - hopefully they can sort it out! Now I’m no techy, but this mentioned .cn domain site link has replaced my profile information on an international penpal website. Seems strange, my email account has also been hacked by somebody who is now sending out emails with .cn links, not to mention the daily pile of spam sent with .cn links. Hotmail has been contacted - hopefully they can sort it out!

]]> By: Richard http://www.sudosecure.net/archives/83#comment-55 Richard Wed, 28 May 2008 21:44:28 +0000 http://www.sudosecure.net/?p=83#comment-55 This morning I reported dota11.cn to Google.com and they then reported the site to <a href="http://www.stopbadware.org/" title="StopBADware.org" rel="nofollow"> Google uses the StopBADware database to decide when to show a warning page to users. And so Google users should now get a warning. The bigger question is how is this happening? In this case the targeted web servers seem to belong to small/medium businesses with low technical knowledge: <a href="http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=3409559&SiteID=1" title="Microsoft Forum - SQL Server Data Access" rel="nofollow"> -Richard comet at transbay dot net This morning I reported dota11.cn to Google.com and they then reported the site to

Google uses the StopBADware database to decide when to show a warning page to users. And so Google users should now get a warning.

The bigger question is how is this happening?

In this case the targeted web servers seem to belong to small/medium businesses with low technical knowledge:

-Richard
comet at transbay dot net

]]>