Bueno, al parecer los fabricantes de malware no descansan, ni perdonan. Ya existe una lista de dominios relacionados con la Influenza Porcina (Mexican Flu en Europa / Swine Flu en USA). Aún no parecen estar esparciendo malware o realizando campañas de donaciones, sin embargo por lo menos uno (symptoms-of-swine-flu.com) parece estar ofreciendo medicinas de dudosa procedencia.
Al parecer la mayoria de los dominios parecen estar “parqueados” solamente tratando de recolectar puntos de Googlesads.
| h1n1swineflu.com | links to birdflu site (google ads) |
| human-swine-influenza.com | under construction |
| humanswineflu.com | same as h1n1swineflu.com |
| pandemicswineflu.com | same as h1n1swineflu.com |
| swine-flu-info.co.nz | info site (google ads) |
| swine-flu-information.com | info site (google ads) |
| swine-flu-news.com | info site (google ads) |
| swine-flu-symptoms.com | info site |
| swine-flu-symptoms.info | info site (link to google ads) |
| swine-flu-vaccine.sdfgdfd.us | junk search / link site |
| swine-flu.info | godaddy parked |
| swine-flu.net | godaddy parked |
| swine-flu.org | godaddy parked |
| swine-influenza-news.org | info site (google ads) |
| swineflu-symptoms.com | godaddy parked |
| swineflu.biz | same as h1n1swineflu.com |
| swineflu.info | same as h1n1swineflu.com |
| swineflu.us | same as h1n1swineflu.com |
| swineflubase.com | under construction (wordpress site) |
| swineflublog.comv | info site (google ads) |
| swinefludrugs.com | same as h1n1swineflu.com |
| swinefluforum.com | swineflu.org, forum |
| swineflumaps.com | info site (google ads) |
| swineflupost.com | under construction |
| swinefluprecaution.com | godaddy parked |
| swinefluprecautions.com | godaddy parked |
| swineflusymptoms.net | directory index / under construction |
| swineflusymptoms.us | info site / onclose ads |
| swineflusymtoms.com | unrelated info / ebay ads / amazon ads |
| swineflusyptoms.com | godaddy parked |
| swineflusyptoms.net | godaddy parked |
| swineflutv.com | same as h1n1swineflu.com |
| swinefluvaccine.info | godaddy parked |
| swinefluvaccines.com | same as h1n1swineflu.com |
| swinefluvirussymptoms.com | godaddy parked |
| swineinfluenzasymptoms.com | junk site / parked |
| symptoms-of-swine-flu.com | pharma ad, tamiflu UK (legit?) |
| symptoms-of-swine-flu.info | info site (google ads) |
| theswineflu.com | parked/ads |
| theswineflusymptoms.com | info site (google ads) |
F-Secure ha publicado una lista actualizada de los sitios relacioanados con la Influenza Porcina, la pueden encontrar aqui: www.f-secure.com/weblog/archives/swineflu_domains.txt
No puedo enfatizar más que se deben tomar medidas extremas al entrar a estos sitios, o al hacer click en los enlaces de correos referentes a esta pandemia. La mayoria de los sitios deben estar infectados con malware, o por lo menos trataran de infectar las PCs, robar información bancaria y demás actividades ilegales.
Aqui pueden encontrar un ejemplo de un ataque de spam relacionado con la influenza porcina, gracias a la gente de McAfee: http://www.avertlabs.com/research/blog/index.php/2009/04/27/swine-flue-spam/
Fuente: isc.sans.org