RFI Attacks

Suspected Attacks 366086

[Details]


Recruiting Chinese Attackers

With all the talk about Chinese malware authors and groups of attackers supposedly sponsored by governments out there, I thought I would publish a find of mine from back in 2007. Excellent research has been done on this topic with one of the most interesting events being the discovery of GhostNet.

The following message was discovered in a HTML comment section inside a hostile script. I found the page hosting the script by searching for a string inside an ANI exploit on Google in May 2007.

天高云淡,正宜一马奔腾,青春年少,我自纵横驰骋,这是一个只承认强者的时代,然而学习正是赋予了我们作强者的资本,物竟天择,适者生存,只有不断的学习我们才不会被社所会淘汰,我们才会逐渐变强,珍惜你生命中的每一分钟无学习,你会发现平凡的你一样很优秀,当你在风烛残年的那一刻时,面对你的朋友,爱人,儿子,不会因碌碌无为而羞耻,不会因年华虚度而悔恨,你会发现当你,把你的你的青春变的更加劲直和充满活力的时候,曾经无奈与迷茫的你,现在是那样的精彩与辉煌黑域战盟一个,和平,博爱,互助,不会有任何的技术歧视的技术团体,诚心邀请您的加盟楚蓝枫QQ4998XXXXX

This translates to:

It is a clear day, suitable for horse gallops.  The youth is young; he can advance freely and quickly.

This is the era which appreciates only the strong, the survival of the fittest; yet study is the capital which empowers us to become strong. Only through continuous learning we will not be eliminated, we will become stronger and stronger. Cherish every minute of life with learning, you will find yourself as extraordinary as others. When you become old, in the face of your friends, wife, son, you will not feel shame and regret because you did not waste time when you were young; you will find yourself so wonderful when you contributed your vibrant youth into something meaningful, and changed yourself from once a helpless and confused you to someone brilliant.QQ4998XXXXX

Interesting message they were trying to get across isn’t it? :)

  • Share/Bookmark

Leave a Reply

 

 

 

You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>