Yet another set of SSH Zlob Trojan Family’s Component sites

Yet another set of SSH Zlob Trojan Family’s Component sites

Patrick Jordan at Sunbelt Malware Research posted the new scam sites used by SSH Zlob Trojan. Thanks to our CWS Encylopedia Patrick Jordan for posting this information on Sunbelt Blog.

Scam Internet Security Page:
Site Name: Softhomepage.com
IP Address: 85.255.116.210

Screenshot of Softhomepage.com site:

404Errorpage Scam:
Site Name: Managedns404.com
IP Address: 85.255.118.244

Screenshot of managedns404.com site:

Security Guide Scam Page:
Site Name: Secureinstruct.com
IP Address: 85.255.118.213

Screenshot of Secureinstruct.com/soft site:

Screenshot of Secureinstruct.com/Test site:

Ad-Server-Gate Pages:
Site Name: Gateds.com
IP Address: 85.255.118.34

Site Name: Gatece.com
IP Address: 85.255.118.210

The Ad-Server-Gate pages redirects to fake Security center site Safetyalertings.com which promotes Rogue security applications.

Site Name: Safetyalertings.com
IP Address: 85.255.118.214

Screenshot of Safetyalertings.com site:

All the above mentioned sites advertise well documented Rogue security applications. Stay away from these sites.

Bharath M N