Resolved zxz.consulting-info.eu to 5.39.71.80
This is the french hecker known as h4r3 who has been posted before
Andromeda
This is the same andromeda net that was posted before, just with the rest of the domains.
Previous/disabled domains
vvv.exp1oit.in
xxx.be-shopping.net
Current domain: zxz.consulting-info.eu
Gate file: /service/image.php
Plugins:
Rootkit: tbontepaard.nl/gllr/r.pack
Socks: tbontepaard.nl/gllr/s.pack
kbot
Server: zxz.consulting-info.eu
Gate file: /to/gate.php
Hosting infos: http://whois.domaintools.com/5.39.71.80
Also by the same guy (looks like it’s down right now)
Spyeye (Hosted by vmbox.co)
Server: 94.242.238.212
Gate file: /_cp/gate.php
Collector port: 443
http://whois.domaintools.com/94.242.238.212