more NACHA spam this morning, this time the payload is at financeportal.sytes.net/major.php?page=111d937ec38dd17e on 174.140.165.90. Blocking the IP address rather than the domajor is most likely best as there may well be other malicious sites on that server. 174.140.165.90 is on Directspace LLC in Oregon who seem to have a critical problem with malware in the moment, I [...]
See more..
