Caution: Malware spreading site identified!

You may have read my last post which explains how my FTP account was Hacked and 3 of my Domains were being compromised and corrupts scripts were inserted into its source code for spreading malware and for Black Hat purpose. This is among the worse attack and many of the FTP users are being affected because of this. It is suggested that you use SFTP for security purposes!

I also suggest you to scan all your domains using Unmask Parasites and if you find these links then delete them as soon as possible and shift to SFTP. Stop using FTP! Also check your Client PC for any Virus and Malware issues.

http://kollinsoy.skyefenton.com was the site which is spreading malware to all the users and people who don’t use any antivirus protection of any old browsers are falling prey to it. Some of its variants are:

1. kollinsoy.skyefenton.com:8080/Hardware.js
2. kollinsoy.skyefenton.com/index.php
3. http://kollinsoy.skyefenton.com:8080/Telnet.js
4. http://kollinsoy.skyefenton.com:8080/Kibibyte.js
5. kollinsoy.skyefenton.com:8080/Parallel_Port.js
6. http://kollinsoy.skyefenton.com:8080/HDMI.js
7. http://kollinsoy.skyefenton.com:8080/welcome.php

Even wordpress blogs as well as static websites were being compromised because of these malware.

This malware is said to store and transmit all your passwords to Russian and Chinese Hackers and they may use your domains for BlackHat SEO purpose or for further spread of this malware.

It is suggested that you stay away from these sites even though secure web-browsers are blocking it because of malware content.