Hello,

I've just come across a google code project using your platform to host
configuration files for malware samples of the family Trojan Clicker /
Frosparf.

The project is hosted at:
https://code.google.com/p/cfpro00007/

See for example this malware report:
https://www.virustotal.com/en/file/fdd1c350e3bf9fa22a8bc359f4db3024369f54077b4b4d40ec555f57545450a4/analysis/1411416308/#behavioural-info
The 2nd logged connection under "HTTP requests" is to
http://cfpro00007.googlecode.com/svn/trunk/anti.php

that is where the malware loads one of its configuration files.

I believe all the projects for this user are to be considered related to
spreading malware:
https://code.google.com/u/116231827149616739038/

Thank you, regards

    Davide

-- 
You received this message because you are subscribed to the Google Groups 
"Project Hosting on Google Code" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-code-hosting+unsubscr...@googlegroups.com.
To post to this group, send email to google-code-hosting@googlegroups.com.
Visit this group at http://groups.google.com/group/google-code-hosting.
For more options, visit https://groups.google.com/d/optout.
  • Google code abuse: proj... Davide Canali

Reply via email to