phishing analysis - help

Networking/Security Forums -> Anonymity // Privacy // Spam

Author: browolf PostPosted: Sat Dec 03, 2005 4:19 am    Post subject: phishing analysis - help
I've been keeping an eye on a recent deluge my bt account is experiencing of uk banking scams. this started in nov sometime with barclays onces but has now progressed on to halifax and lloyds tsb ones.
these are all ones using port 680 or 780 and the path /rock/

i've noticed, from some i was checking out just now that they all seem to be hosted on
Apache/2.0.46 (CentOS) Server

but error pages from 3 root ips show IIS error pages.
infact netcraft shows
2 winxp
1 server 2003

so they're prob all pre-configured apache uploaded to compromised machines. so why does it mention centOS?

Networking/Security Forums -> Anonymity // Privacy // Spam

output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group