WordPressのpluginsフォルダにmail.htm

観測日： 2012/10/16

通数： 200通/day

手法： 誘導URL型

目的： マルウェア感染

BHEK2がらみですよね。

今回は、特定のネタではなくさまざまな文面が利用されてますが、この文面が一番多いようです。

今回の特徴は誘導URLにつかわれているhtmlファイルがpluginsかthemeフォルダにおかれています。

 ｈttp://abstract.nassassin.com/wp-content/plugins/counterize/mail.htm
 ｈttp://affairsoftheheart.rocus.org/wp-content/themes/twentyten/mail.htm
 ｈttp://assistedlivingwestminsterco.com/wp-content/plugins/zadassoaqrm/mail.htm
 ｈttp://beshapebyrossen.com/wp-content/plugins/akismet/mail.htm
 ｈttp://blog.asiatraveladvisor.com/wp-content/plugins/seo-ultimate/mail.htm
 ｈttp://blog.ghb.pl/wp-content/themes/classic/mail.htm
 ｈttp://blog.maciejgas.com/wp-content/plugins/akismet/mail.htm
 ｈttp://blog.smartphones.pk/wp-content/plugins/zfuyudfobic/mail.htm
 ｈttp://blurayplayerbargains.com/wp-content/themes/twentyten/mail.htm
 ｈttp://cajolable.com/wp-content/themes/benevolence/mail.htm
 ｈttp://css.webtm.ru/wp-content/plugins/zasqiuhomew/mail.htm
 ｈttp://darmowesexanonse.pl/wp-content/themes/twentyeleven/mail.htm
 ｈttp://desfundare-canalizare.ro/wp-content/plugins/mail.htm
 ｈttp://euro-business.com.pl/wp-content/themes/twentyeleven/mail.htm
 ｈttp://fugyourcms.com/wp-content/plugins/disable-wpautop/mail.htm
 ｈttp://gruene-pforzheim-enz.de/wp-content/plugins/akismet/mail.htm
 ｈttp://ha.falmouthjournalism.co.uk/wp-content/themes/twentyten/mail.htm
 ｈttp://haskovoi.com/wp-content/themes/twentyten/mail.htm
 ｈttp://jasonhowell.com/wp-content/plugins/akismet/mail.htm
 ｈttp://laboratoryproductions.com/wp-content/plugins/mail.htm
 ｈttp://linkfan.neteasy.pl/wp-content/plugins/akismet/mail.htm
 ｈttp://odessa.illion-ua.com/wp-content/themes/Sensation/mail.htm
 ｈttp://omstart10.onboxmedia.com/wp-content/plugins/akismet/mail.htm
 ｈttp://pandorco.com/wp-content/themes/twentyten/mail.htm
 ｈttp://pdrtl.in/wp-content/plugins/akismet/mail.htm
 ｈttp://priori.neconserver.pl/wp-content/plugins/zjrueppebau/mail.htm
 ｈttp://scottishpebbles.co.uk/wp-content/plugins/mail.htm
 ｈttp://sea-partner.com/wp-content/plugins/authimage/mail.htm
 ｈttp://spalnobelio.eu/wp-content/themes/default/mail.htm
 ｈttp://sportslegendsonline.com/wp-content/themes/twentyten/mail.htm
 ｈttp://terreros.es/wp-content/themes/mobile_pack_base/mail.htm
 ｈttp://top20.volle-information.de/wp-content/themes/seo_theme_1/mail.htm
 ｈttp://vampireavatar.com/wp-content/themes/twentyten/mail.htm
 ｈttp://vestberries.com/wp-content/themes/sliding-door/mail.htm
 ｈttp://www.0cx.org/wp-content/plugins/recent-google-searches-widget/mail.htm
 ｈttp://www.39moto.ru/wp-content/plugins/flv-player/mail.htm
 ｈttp://www.39moto.ru/wp-content/plugins/superb-slideshow/mail.htm
 ｈttp://www.aenton.se/wp-content/plugins/mail.htm
 ｈttp://www.aracotokiralama.com/wp-content/plugins/eklentiler/mail.htm
 ｈttp://www.blog.asociaciongeografica.com/wp-content/plugins/wp-hashcash/mail.htm
 ｈttp://www.cemocan24.eu.gg/wp-content/themes/twentyeleven/mail.htm
 ｈttp://www.chalkhousegreenfarm.co.uk/wp-content/themes/twentyeleven/mail.htm
 ｈttp://www.cketch.com/wp-content/plugins/wp-statistics/mail.htm
 ｈttp://www.dikk.it/wp-content/themes/twentyten/mail.htm
 ｈttp://www.fernandapinochetgeissecl/wp-content/plugins/wp-hashcash/mail.htm
 ｈttp://www.folkcure.ru/wp-content/themes/twentyeleven/mail.htm
 ｈttp://www.fotoceramica.co.il/wp-content/plugins/rtler/mail.htm
 ｈttp://www.giorno.ro/wp-content/plugins/configurable-tag-cloud-widget/mail.htm
 ｈttp://www.handygalaxy.com/wp-content/plugins/mail.htm
 ｈttp://www.hwnetwork.com/wp-content/plugins/zkcrhevioeo/mail.htm
 ｈttp://www.hy991.com/wp-content/plugins/akismet/mail.htm
 ｈttp://www.ilgiracose.it/wp-content/plugins/zueoxooirue/mail.htm
 ｈttp://www.inevco.ca/wp-content/themes/twentyeleven/mail.htm
 ｈttp://www.katalogus.msnfan.hu/wp-content/plugins/zweejobmlow/mail.htm
 ｈttp://www.kuponkonyv.com/wp-content/plugins/azigen/mail.htm
 ｈttp://www.lihovinky.cz/wp-content/themes/default/mail.htm
 ｈttp://www.namethecar.com/wp-content/plugins/tweet-this/mail.htm
 ｈttp://www.odiseya.net/wp-content/themes/twentyten/mail.htm
 ｈttp://www.rebeccasantillo.com/wp-content/themes/twentyten/mail.htm
 ｈttp://www.reclame-video.ro/wp-content/themes/wallow/mail.htm
 ｈttp://www.relief-for-anxiety.com/wp-content/themes/twentyeleven/mail.htm
 ｈttp://www.renataoosterveen.nl/wp-content/plugins/znhefbeunia/mail.htm
 ｈttp://www.sandiegodefenseattorney.org/wp-content/plugins/komoona-ads-google-adsense-companion/mail.htm
 ｈttp://www.schafhof-drachenhoehle.de/wp-content/plugins/slimbox/mail.htm
 ｈttp://www.strathconacondo.org/wp-content/themes/twentyeleven/mail.htm
 ｈttp://www.thechambrangs.be/wp-content/themes/twentyeleven/mail.htm
 ｈttp://www.tommylin.com/wp-content/plugins/mail.htm
 ｈttp://www.vivaesperanza.org/wp-content/plugins/zmwyopuvejl/mail.htm
 ｈttp://www.watchesehot.com/wp-content/plugins/akismet/mail.htm
 ｈttp://www.westparkpc.com/wp-content/plugins/add-to-any/mail.htm
 ｈttp://www.witt-hahn.com/wp-content/plugins/zogojtedgaa/mail.htm

[カテゴリ:spam観察日記]

by jyake