Operation Ghost Click

Thu Apr 26 21:56:01 UTC 2012

I suggest you reach out to Shadowserver or Team Cymru if you're a
netblock owner.  They can provide daily reports of infected IPs.

Andy

Andrew Fried
andrew.fried at gmail.com

On 4/26/12 5:50 PM, Leigh Porter wrote:
> 
> On 26 Apr 2012, at 22:47, "Andrew Latham" <lathama at gmail.com<mailto:lathama at gmail.com>> wrote:
> 
> On Thu, Apr 26, 2012 at 5:38 PM, Jeroen van Aart <jeroen at mompl.net<mailto:jeroen at mompl.net>> wrote:
> 
> Yes its a major problem for the users unknowingly infected.  To them
> it will look like their Internet connection is down.  Expect ISPs to
> field lots of support s
> 
> Is there a list of these temporary servers so I can see what customers are using them (indicating infection) and head off a support call with some contact?
> 
> --
> Leigh
> 
> 
> ______________________________________________________________________
> This email has been scanned by the Symantec Email Security.cloud service.
> For more information please visit http://www.symanteccloud.com
> ______________________________________________________________________