Now with Sportsbetting hack

[FMecan]

Ok, there goes the next round. This is the latest injected iframe:

http://potatoeaters.net/de/

Saw it already in several hacked sites.

[FMecan]

And this is the stolen UK version, including gambling.com copy.... http://potatoeaters.net/uk/

[FMecan]

Before it is gone, the whois of the domain
Domain Name: POTATOEATERS.NET
Registry Domain ID: 1879257315_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.regtime.net
Registrar URL: http://www.webnames.ru
Updated Date: 2014-10-07T18:37:41Z
Creation Date: 2014-10-07T00:00:00Z
Registrar Registration Expiration Date: 2015-10-07T04:00:00Z
Registrar: REGTIME LTD.
Registrar IANA ID: 1362
Registrar Abuse Contact Email: abuse@regtime.net
Registrar Abuse Contact Phone: +7.8463733047
Domain Status: OK
Registry Registrant ID:
Registrant Name: Yuliya Esipenko
Registrant Organization: Yuliya Esipenko
Registrant Street: Morozova str. 13
Registrant City: Rezh
Registrant State/Province: Sverdlovskaya obl
Registrant Postal Code: 693524
Registrant Country: RU
Registrant Phone: +7.4954927649
Registrant Email: potatoeaters.net@allperson.ru
Registry Admin ID:
Admin Name: Yuliya Esipenko
Admin Organization: Yuliya Esipenko
Admin Street: Morozova str. 13
Admin City: Rezh
Admin State/Province: Sverdlovskaya obl
Admin Postal Code: 693524
Admin Country: RU
Admin Phone: +7.4954927649
Admin Email: potatoeaters.net@allperson.ru
Registry Tech ID:
Tech Name: Yuliya Esipenko
Tech Organization: Yuliya Esipenko
Tech Street: Morozova str. 13
Tech City: Rezh
Tech State/Province: Sverdlovskaya obl
Tech Postal Code: 693524
Tech Country: RU
Tech Phone: +7.4954927649
Tech Email: potatoeaters.net@allperson.ru

[Roulette Zeitung]

Without an evidence, (at least) a small list of victims or demonstrating the way how to see victims websites in Google search result pages, programs on the list can't act.

By the way: It's no personal, but one post with all information for the audience is more helpful than three posts in a row within 9 minutes, because a single thread page includes only 20 posts.

Leopold

[FMecan]

An example of results, all base on this site: https://www.google.de/?gws_rd=ssl#q=...etten-dass.php

And here a second list: https://www.google.de/?gws_rd=ssl#q=...ten%2Fmap1.php

For the UK version, I am sure it would be easy to find some as well.

[wonderpunter]

I have been getting lots.. and i mean a lot of entry attempts hitting my site.. mainly from Italy..wonder if it's the same hacker?