Posted: Sat Dec 03, 2005 4:19 am Post subject: phishing analysis - help
I've been keeping an eye on a recent deluge my bt account is experiencing of uk banking scams. this started in nov sometime with barclays onces but has now progressed on to halifax and lloyds tsb ones.
these are all ones using port 680 or 780 and the path /rock/
i've noticed, from some i was checking out just now that they all seem to be hosted on
Apache/2.0.46 (CentOS) Server
but error pages from 3 root ips show IIS error pages.
infact netcraft shows
2 winxp
1 server 2003
so they're prob all pre-configured apache uploaded to compromised machines. so why does it mention centOS?
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum