<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Web of Koobface</title>
	<atom:link href="http://blog.unmaskparasites.com/2010/02/27/web-of-koobface/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.unmaskparasites.com/2010/02/27/web-of-koobface/</link>
	<description>Website insecurity by example</description>
	<lastBuildDate>Sun, 05 Feb 2012 10:06:25 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Virus in altervista?!!! - AlterVista &#124; Spazio web gratis, hosting free php mysql</title>
		<link>http://blog.unmaskparasites.com/2010/02/27/web-of-koobface/comment-page-1/#comment-7505</link>
		<dc:creator>Virus in altervista?!!! - AlterVista &#124; Spazio web gratis, hosting free php mysql</dc:creator>
		<pubDate>Tue, 18 May 2010 18:19:33 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=554#comment-7505</guid>
		<description>[...] dati di accesso agli eventuali siti web gestiti con quel PC.  Tra questi, molto recente, koobface:  http://blog.unmaskparasites.com/2010...b-of-koobface/  Importante la sezione &quot;To Webmasters&quot; di questo post.     __________________ [...]</description>
		<content:encoded><![CDATA[<p>[...] dati di accesso agli eventuali siti web gestiti con quel PC.  Tra questi, molto recente, koobface:  <a href="http://blog.unmaskparasites.com/2010...b-of-koobface/" rel="nofollow">http://blog.unmaskparasites.com/2010&#8230;b-of-koobface/</a>  Importante la sezione &quot;To Webmasters&quot; di questo post.     __________________ [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sito compromesso con redirect verso sito malevolo - AlterVista &#124; Spazio web gratis, hosting free php mysql</title>
		<link>http://blog.unmaskparasites.com/2010/02/27/web-of-koobface/comment-page-1/#comment-7093</link>
		<dc:creator>Sito compromesso con redirect verso sito malevolo - AlterVista &#124; Spazio web gratis, hosting free php mysql</dc:creator>
		<pubDate>Mon, 19 Apr 2010 13:55:53 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=554#comment-7093</guid>
		<description>[...] anche se con diverse varianti (vedi in particolare la sezione &quot;To Webmasters&quot;):  http://blog.unmaskparasites.com/2010...b-of-koobface/ http://us.trendmicro.com/imperia/md/...ce_jul2009.pdf  Il tutto ha un preciso riscontro anche sui [...]</description>
		<content:encoded><![CDATA[<p>[...] anche se con diverse varianti (vedi in particolare la sezione &quot;To Webmasters&quot;):  <a href="http://blog.unmaskparasites.com/2010...b-of-koobface/" rel="nofollow">http://blog.unmaskparasites.com/2010&#8230;b-of-koobface/</a> <a href="http://us.trendmicro.com/imperia/md/...ce_jul2009.pdf" rel="nofollow">http://us.trendmicro.com/imperia/md/&#8230;ce_jul2009.pdf</a>  Il tutto ha un preciso riscontro anche sui [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JVDurand</title>
		<link>http://blog.unmaskparasites.com/2010/02/27/web-of-koobface/comment-page-1/#comment-6894</link>
		<dc:creator>JVDurand</dc:creator>
		<pubDate>Sat, 20 Mar 2010 16:18:55 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=554#comment-6894</guid>
		<description>Denis,

there are some facts here pointing towards &quot;quicksilver&quot;: yoyo.pl, another host on the subnet  61.235.117.0 and the infection with koobface itself. It seems to me these malware networks are constantly moving and evolving - playing &quot;catch me if you can&quot; with all of us.

Regards, JVD.</description>
		<content:encoded><![CDATA[<p>Denis,</p>
<p>there are some facts here pointing towards &#8220;quicksilver&#8221;: yoyo.pl, another host on the subnet  61.235.117.0 and the infection with koobface itself. It seems to me these malware networks are constantly moving and evolving &#8211; playing &#8220;catch me if you can&#8221; with all of us.</p>
<p>Regards, JVD.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Denis</title>
		<link>http://blog.unmaskparasites.com/2010/02/27/web-of-koobface/comment-page-1/#comment-6800</link>
		<dc:creator>Denis</dc:creator>
		<pubDate>Sun, 28 Feb 2010 09:11:07 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=554#comment-6800</guid>
		<description>Rick,

Thanks for addressing this issue. It&#039;s nice to know that someone at your level cares enough to monitors the blogoshere.

BTW, I&#039;ve read your &lt;a href=&quot;http://www.google.com/buzz/rick.klau/5kbazRN9h5V/OK-Buzz-friends-Whats-a-spam-blog-Pointers-for&quot; rel=&quot;nofollow&quot;&gt;&quot;What&#039;s a spam blog?&quot;&lt;/a&gt; Buzz discussion.</description>
		<content:encoded><![CDATA[<p>Rick,</p>
<p>Thanks for addressing this issue. It&#8217;s nice to know that someone at your level cares enough to monitors the blogoshere.</p>
<p>BTW, I&#8217;ve read your <a href="http://www.google.com/buzz/rick.klau/5kbazRN9h5V/OK-Buzz-friends-Whats-a-spam-blog-Pointers-for" rel="nofollow">&#8220;What&#8217;s a spam blog?&#8221;</a> Buzz discussion.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rick Klau</title>
		<link>http://blog.unmaskparasites.com/2010/02/27/web-of-koobface/comment-page-1/#comment-6797</link>
		<dc:creator>Rick Klau</dc:creator>
		<pubDate>Sat, 27 Feb 2010 22:05:50 +0000</pubDate>
		<guid isPermaLink="false">http://blog.unmaskparasites.com/?p=554#comment-6797</guid>
		<description>Thanks for taking the time to write this up. I&#039;m responsible for our handling of abuse on Blogger, and have routed this to the engineers responsible for detecting and shutting down exactly this kind of content.

This coincides with a lot of analysis we&#039;ve been doing over the past several weeks about a variety of abuse vectors, and I&#039;ll be writing up our thoughts on Blogger Buzz (http://buzz.blogger.com/) in the near future.

Thanks again.

Rick Klau
PM, Blogger</description>
		<content:encoded><![CDATA[<p>Thanks for taking the time to write this up. I&#8217;m responsible for our handling of abuse on Blogger, and have routed this to the engineers responsible for detecting and shutting down exactly this kind of content.</p>
<p>This coincides with a lot of analysis we&#8217;ve been doing over the past several weeks about a variety of abuse vectors, and I&#8217;ll be writing up our thoughts on Blogger Buzz (<a href="http://buzz.blogger.com/" rel="nofollow">http://buzz.blogger.com/</a>) in the near future.</p>
<p>Thanks again.</p>
<p>Rick Klau<br />
PM, Blogger</p>
]]></content:encoded>
	</item>
</channel>
</rss>

