Educause Security Discussion mailing list archives
Re: Question regarding Marketscore spyware
From: Gary Dobbins <dobbins () ND EDU>
Date: Thu, 2 Dec 2004 16:31:17 -0500
BTW, we've also applied this trick to misdirect access attempts to known phishing sites. When someone is 'successfully' duped into actually clicking the link offered by a phish-mail, they instead get our friendly webpage which describes why one should be suspicious of such emails. Tom Klimek wrote:
Packeter class definition: Class ----> Marketscore Protocol--> IP Service --> HTTP Location -> Outside Host List -> Marketscore (containing:) 66.119.33.134 66.119.33.135 66.119.33.136 66.119.33.138 66.119.33.139 66.119.33.166 66.119.33.168 66.119.34.38 66.119.34.39 66.119.34.40 66.119.34.42 66.119.41.71 66.119.41.74 Policy: Never-Admit Web-redirect Tom Klimek Associate Director, Network Engineering University of Notre Dame 204 Security Building Notre Dame, IN 46556 (574) 631-8277 tklimek () nd edu -----Original Message----- From: The EDUCAUSE Security Discussion Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeff Kell Sent: Thursday, December 02, 2004 2:42 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Question regarding Marketscore spyware Gary Dobbins wrote:Same here - works for us. We use Packeteer for the redirect, but same effect.Care to share your class definition? Jeff Kell University of Tennessee at Chattanooga ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
-- ------------------------------------------------------------ Gary Dobbins, CISSP -- Director, Information Security University of Notre Dame, Office of Information Technologies ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Re: Question regarding Marketscore spyware, (continued)
- Re: Question regarding Marketscore spyware Lutzen, Karl F. (Dec 02)
- Re: Question regarding Marketscore spyware Gary Flynn (Dec 02)
- Re: Question regarding Marketscore spyware Joel Rosenblatt (Dec 02)
- Re: Question regarding Marketscore spyware Dave Monnier, IT Security Office, Indiana University (Dec 02)
- Re: Question regarding Marketscore spyware rwatts (Dec 02)
- Re: Question regarding Marketscore spyware Mike Iglesias (Dec 02)
- Re: Question regarding Marketscore spyware Schultz, Stephen (Dec 02)
- Re: Question regarding Marketscore spyware Joel Rosenblatt (Dec 02)
- Re: Question regarding Marketscore spyware Jeff Kell (Dec 02)
- Re: Question regarding Marketscore spyware Tom Klimek (Dec 02)
- Re: Question regarding Marketscore spyware Gary Dobbins (Dec 02)
- Re: Question regarding Marketscore spyware Scholz, Greg (Dec 02)
- Re: Question regarding Marketscore spyware Chris Allison (Dec 03)
- Re: Question regarding Marketscore spyware Joseph Karam (Dec 03)
- Re: Question regarding Marketscore spyware Eric Pancer (Dec 03)
- Re: Question regarding Marketscore spyware Skrdla, David (Dec 06)
- Re: Question regarding Marketscore spyware Skrdla, David (Dec 21)