All Things Techie With Huge, Unstructured, Intuitive Leaps
Showing posts with label java update virus. Show all posts
Showing posts with label java update virus. Show all posts

Java Update Virus Injection

This is a new virus injection from a hacked site.  I was at a respectable site when all of a sudden, a notice popped up saying that I had to update my java.  I was on a static site and it looked suspicious.  Without clicking on the update link, it never came from Oracle/Java but rather from a domain called Upkendint, which I traced to Panama.


Domain Name: UPKENDINT.COM
Registry Domain ID: 1852189971_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-03-27 02:02:05Z
Creation Date: 2014-03-27 09:02:00Z
Registrar Registration Expiration Date: 2015-03-27 09:02:00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252744500
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: A9DB4936860A4CAD9573A6830797575F.PROTECT@WHOISGUARD.COM
Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: A9DB4936860A4CAD9573A6830797575F.PROTECT@WHOISGUARD.COM
Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA

You really have to be careful these days and verify that what you clicking was actually sent by the entity that they say they are.

Caution.