Jump to content

Zynthesist

Staff
  • Posts

    4,622
  • Joined

Everything posted by Zynthesist

  1. Block will be changed to hostname block. Parent domain is and has been used and abused by locky ransomware.
  2. Not seeing that domain in our DBs, checked some of the more recent IPs it has been using but not seeing those either in our DBs. I also tried to but was not able to re-play the block while running MBAM.
  3. *go.ro is being used to distribute Locky ransomware, we are blocking it.
  4. Blocked for distributing Locky ransomware, we are blocking *jazztel.es .
  5. I will be making a change to the block, which was related to Phishing.
  6. http://usaa2.zag.com/main.html
  7. Block is currently on hostname only so ensure you have updated MBAM to current DB version.
  8. The recent Locky ransomware campaigns have been using *.talktalk.net to distribute Locky ransomware.
  9. Can you please post the protection log.
  10. Hello, Ensure you have the latest update, as we are not blocking the domain or IP you are inquiring about.
  11. Ah ok. Actually I see you listed two different IPs, one in the title and the one in your original post and the web protection block. We are not blocking any of the IPs, we are blocking the domain. Should be able to add it to exclusion: https://www.malwarebytes.com/support/guides/mbam/WebExclusions.html
  12. Hello Teresa, We are not blocking that domain or IP. We are blocking a very similar domain universiteenligne[.]icp.fr for phishing.
  13. We have a block on this parent domain for malvertizing activities.
  14. There was an identified phishing threat related to the altervista.org domain. I will be removing the block.
  15. Hello, An identified phishing threat caused the block. I will now remove the block.
  16. Hello, There was an identified phishing threat on dev-freemobile-abonne-fr[.]pantheonsite.io, which has been cleaned up. I will be removing the block now.
  17. Hello, It is not a domain but an IP block. The block will be removed.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.