- About us
- Code of Conduct
- Google SoC
- Recent posts
- Security Workshops
While playing with the current hsoc code, I got attacked, and saw an offer to download something from somewhere.
To honor their effort, I decided to give them a visit ...
If you can't touch it, you have to count it, I appreciate the decision to share these numbers with everybody connecting.
Today, I wanted to give them a new shot, fresh numbers, so I could compare the numbers to see if they seem reliable.
For some reason the domain v1.usbupdatestrings.at is gone already, but the service was still running on the same ip.
So, within 20hours, their ftp service had:
Getting copies of the malware from the service and submit them to virustotal, to verify if the five malware updates during the last 20 hours were worth the effort, is left as an exercise for the reader.