[Itpolicy-np] Re: [NepSecure] cybersansar and cybernepal websites

[Bipin Gautam]

Nice catch. Thanks for the info Kshitiz! How many of local the
visitors got HACKED (because the website was compromised?) and serving
malware is the question.....

Damage assessment due!

______
What is the current listing status for cybersansar.com.np?

   Site is listed as suspicious - visiting this web site may harm
your computer.

   Part of this site was listed for suspicious activity 6 time(s)
over the past 90 days.


What happened when Google visited this site?

   Of the 332 pages we tested on the site over the past 90 days, 48
page(s) resulted in malicious software being downloaded and installed
without user consent. The last time Google visited this site was on
2010-09-02, and the last time suspicious content was found on this
site was on 2010-09-01.

   Malicious software includes 18 exploit(s). Successful infection
resulted in an average of 1 new process(es) on the target machine.

   Malicious software is hosted on 4 domain(s), including
googlesstats.in/, audo20s.in/, googlesmaps.in/.

   3 domain(s) appear to be functioning as intermediaries for
distributing malware to visitors of this site, including
googlesearchs.in/, sutra.jino.ru/, hellguys.in/.

   This site was hosted on 1 network(s) including AS17501 (WLINK).

On 9/15/10, Kshitiz Shrestha <kshrestha777 at gmail.com> wrote:
> Dear All,
>
> This been happening for long time
> both cybernepal and cybersansar domains
>
> http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://www.cybersansar.com.np/
>
>
>
> Regards
>
>
> Kshitiz Shrestha
>
> --
> You received this message because you are subscribed to the Google Groups
> "NepSecure (Nepali computer security and hacking community )" group.
> To post to this group, send email to nepsecure at googlegroups.com.
> To unsubscribe from this group, send email to
> nepsecure+unsubscribe at googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/nepsecure?hl=en.
>
>