[Scgeeks] Query: watch.ru
rooster
acmeanvil at fishnet.com
Sat Aug 23 22:29:08 EDT 2008
watch.ru
McAFee's overview indicates watch.ru is relatively benign, albeit;
”Reliable sources indicate that this site may be a legitimate business
under attack by spammers.”
The html on the site presents enticements to d/l “macromedia flash
player“ (“fp...macromedia.com/go/getflashplayer", as well as to click on
“iframe” <.../cgi-bin/lasttopic.cgi>.
As a general rule, both of these kinds of objects present potential
malware threats. Checks on embedded links on watch.ru to other sites
(e.g., liveinternet.ru, alltime.ru) didn't yield anything especially
damning. I suspect there might be click fraud or malware involved since
watch.ru has a history of vulnerability and the recent incidence of spam
linking to watch.ru correlates with other click fraud, phishing and
malware attempts I'm seeing.
Are any of y'all set up to drill down any further to see if this is just
an intermittently spammy site that resembles a dangerous site or if it's
actually currently dangerous?
IMWTK
--
Happy trails,
rooster
boundary beach, bc
More information about the SCgeeks
mailing list