rat-forums.net (Ice 9 banking malware proxied by cloudflare)

Resolved rat-forums.net to 108.162.194.61, 108.162.194.161

Server:  rat-forums.net
Gate file:   /web/adm/gate.php
Config file:  /web/config/index.php

This is the first time I’ve seen the ice 9 zeus mod in the wild. I guess all the skiddies are trying it out now that it’s cracked.
Hopefully cloudflare will put a stop to their experimenting.