:: [Bricolabs] [Fwd: Re: [Ticket#20120…
Top Page
Delete this message
Reply to this message
Author: Rob van Kranenburg
Date:  
To: Bricolabs
Subject: [Bricolabs] [Fwd: Re: [Ticket#2012032710000126] Gesuspende site]
Hi all,

It seems that oswash.org got hacked. It was not probably maintained well.
Anyone have an idea on how to handle this ? see below,

Cheers, Rob


---------------------------- Original Message ----------------------------
Subject: Re: [Ticket#2012032710000126] Gesuspende site
From:    "VibiT" <info@???>
Date:    Tue, March 27, 2012 09:42
To:      kranenbu@???
--------------------------------------------------------------------------


Beste,

Wij hebben onderstaand bericht ontvangen... zo te zien heeft Microsoft
uw site gesuspend. Wij sturen u dit bericht door waardoor u deze zaak verder
met hen kunt regelen.

Met vriendelijke groeten,

Christian Vey

VibiT BVBA
Postbus 77
8500 Kortrijk
België
Tel: +32 (0)56/89.00.71
Fax: +32 (0)2/640.56.60

Web: www.vibit.eu
Blog: www.vibber.be
Tweets: twitter.com/VibiT
---- Forwarded message from "Ramsey, Gabriel M." <gramsey@???> ---

From: "Ramsey, Gabriel M." <gramsey@???>
To: "info@???" <info@???>
Subject: IMPORTANT LEGAL NOTICE: Microsoft Corp., FS-ISAC, Inc. and National
Automated Clearing House Association v. John Does 1-39 (Case No. CV
12-1335 (CBA))
Date: 2012-03-27 08:17:28

> This is about the domain oswash.org, which is delivering Zeus Botnet

malicious
software. Please contact me if you have any questions.
>
> Plaintiffs Microsoft Corporation ("Microsoft"), National Automated

Clearing House
Association ("NACHA") and Financial Services - Information Sharing and
Analysis
Center ("FS-ISAC") have sued defendants John Does 1-39 associated with the
Internet
Domains and Internet IP Addresses listed in the documents at
http://www.zeuslegalnotice.com. Plaintiffs allege that Defendants have
violated
Federal and state law by operating a computer botnet through these
Internet domains
and Internet IP addresses, causing unlawful intrusion, intellectual property
violations and dissemination of unsolicited bulk email to the injury of
Microsoft
and the public. Plaintiffs seek a preliminary injunction and seizure order
directing the registries and web hosting companies associated with these
Internet
domains and IP addresses to take all steps necessary to disable access to and
operation of these Internet domains and IP addresses, ensure that changes
or access
to the Internet domains and IP addresses by Defendants cannot be made
absent a
court order and that all content and material associated with these Internet
domains and IP addresses is to be isolated and preserved pending
resolution of the
dispute. Plaintiffs seek a permanent injunction, other equitable relief and
damages. Full copies of the pleading documents are available at
http://www.zeuslegalnotice.com/.
>
> NOTICE TO DEFENDANTS: READ THESE PAPERS CAREFULLY! You must "appear"

in this
case or the other side will win automatically. To "appear" you must file
with the
court a legal document called a "motion" or "answer." The "motion" or
"answer"
must be given to the court clerk or administrator within 21 days of the
date of
first publication of this notice. It must be in proper form and have
proof of
service on the Plaintiffs' attorney, Gabriel M. Ramsey at Orrick,
Herrington &
Sutcliffe LLP, 1000 Marsh Rd., Menlo Park, California, 94025,
gramsey@???<mailto:gramsey@orrick.com>, (650) 614-7361. If you have
questions, you should consult with your own attorney immediately
>
>
> [Orrick]<http://www.orrick.com/>
>
> Gabriel M. Ramsey
>
> Partner
>
> Orrick, Herrington & Sutcliffe LLP
> 1000 Marsh Road
> Menlo Park, CA 94025-1015
> tel 650-614-7361
> fax 650-614-7401
> email gramsey@???
> www.orrick.com<http://www.orrick.com>
>
> ===========================================================
> IRS Circular 230 disclosure: To ensure compliance with requirements
> imposed by the IRS, we inform you that any tax advice contained in this
> communication, unless expressly stated otherwise, was not intended or
> written to be used, and cannot be used, for the purpose of (i) avoiding
> tax-related penalties under the Internal Revenue Code or (ii) promoting,
> marketing or recommending to another party any tax-related matter(s)
> addressed herein.
> ===========================================================
> NOTICE TO RECIPIENT: THIS E-MAIL IS MEANT FOR ONLY
> THE INTENDED RECIPIENT OF THE TRANSMISSION, AND
> MAY BE A COMMUNICATION PRIVILEGED BY LAW. IF YOU
> RECEIVED THIS E- MAIL IN ERROR, ANY REVIEW, USE,
> DISSEMINATION, DISTRIBUTION, OR COPYING OF THIS
> E-MAIL IS STRICTLY PROHIBITED. PLEASE NOTIFY US
> IMMEDIATELY OF THE ERROR BY RETURN E-MAIL AND
> PLEASE DELETE THIS MESSAGE FROM YOUR SYSTEM.
> THANK YOU IN ADVANCE FOR YOUR COOPERATION.
> For more information about Orrick, please visit

http://www.orrick.com/<http://www.orrick.com>
> ===========================================================
>

---- End forwarded message ---

This is about the domain oswash.org, which is delivering Zeus Botnet malicious software. Please contact me if you have any questions.

Plaintiffs Microsoft Corporation ("Microsoft"), National Automated Clearing House Association ("NACHA") and Financial Services - Information Sharing and Analysis Center ("FS-ISAC") have sued defendants John Does 1-39 associated with the Internet Domains and Internet IP Addresses listed in the documents at http://www.zeuslegalnotice.com. Plaintiffs allege that Defendants have violated Federal and state law by operating a computer botnet through these Internet domains and Internet IP addresses, causing unlawful intrusion, intellectual property violations and dissemination of unsolicited bulk email to the injury of Microsoft and the public. Plaintiffs seek a preliminary injunction and seizure order directing the registries and web hosting companies associated with these Internet domains and IP addresses to take all steps necessary to disable access to and operation of these Internet domains and IP addresses, ensure that changes or access to the Internet domains and IP addresses by Defendants cannot be made absent a court order and that all content and material associated with these Internet domains and IP addresses is to be isolated and preserved pending resolution of the dispute. Plaintiffs seek a permanent injunction, other equitable relief and damages. Full copies of the pleading documents are available at http://www.zeuslegalnotice.com/.

NOTICE TO DEFENDANTS: READ THESE PAPERS CAREFULLY! You must "appear" in this case or the other side will win automatically. To "appear" you must file with the court a legal document called a "motion" or "answer." The "motion" or "answer" must be given to the court clerk or administrator within 21 days of the date of first publication of this notice. It must be in proper form and have proof of service on the Plaintiffs' attorney, Gabriel M. Ramsey at Orrick, Herrington & Sutcliffe LLP, 1000 Marsh Rd., Menlo Park, California, 94025, gramsey@???<mailto:gramsey@orrick.com>, (650) 614-7361. If you have questions, you should consult with your own attorney immediately


[Orrick]<http://www.orrick.com/>

Gabriel M. Ramsey

Partner

Orrick, Herrington & Sutcliffe LLP
1000 Marsh Road
Menlo Park, CA 94025-1015
tel 650-614-7361
fax 650-614-7401
email gramsey@???
www.orrick.com<http://www.orrick.com>

===========================================================
IRS Circular 230 disclosure: To ensure compliance with requirements
imposed by the IRS, we inform you that any tax advice contained in this
communication, unless expressly stated otherwise, was not intended or
written to be used, and cannot be used, for the purpose of (i) avoiding
tax-related penalties under the Internal Revenue Code or (ii) promoting,
marketing or recommending to another party any tax-related matter(s)
addressed herein.
===========================================================
NOTICE TO RECIPIENT: THIS E-MAIL IS MEANT FOR ONLY
THE INTENDED RECIPIENT OF THE TRANSMISSION, AND
MAY BE A COMMUNICATION PRIVILEGED BY LAW. IF YOU
RECEIVED THIS E- MAIL IN ERROR, ANY REVIEW, USE,
DISSEMINATION, DISTRIBUTION, OR COPYING OF THIS
E-MAIL IS STRICTLY PROHIBITED. PLEASE NOTIFY US
IMMEDIATELY OF THE ERROR BY RETURN E-MAIL AND
PLEASE DELETE THIS MESSAGE FROM YOUR SYSTEM.
THANK YOU IN ADVANCE FOR YOUR COOPERATION.
For more information about Orrick, please visit http://www.orrick.com/<http://www.orrick.com>
===========================================================










This is about the domain oswash.org, which is delivering Zeus Botnet malicious software.&nbsp; Please contact me if you have any questions.
&nbsp;
Plaintiffs Microsoft Corporation (&#8220;Microsoft&#8221;), National Automated Clearing House Association (&#8220;NACHA&#8221;) and Financial Services &#8211; Information Sharing
and Analysis Center (&#8220;FS-ISAC&#8221;) have sued defendants John Does 1-39 associated with the Internet Domains and Internet IP Addresses listed in the documents at
http://www.zeuslegalnotice.com.&nbsp; Plaintiffs allege that Defendants have violated Federal and state law by operating a computer botnet through these Internet domains and Internet IP addresses, causing unlawful intrusion,
intellectual property violations and dissemination of unsolicited bulk email to the injury of Microsoft and the public.&nbsp; Plaintiffs seek a preliminary injunction and seizure order directing the registries and web hosting companies associated with these Internet
domains and IP addresses to take all steps necessary to disable access to and operation of these Internet domains and IP addresses, ensure that changes or access to the Internet domains and IP addresses by Defendants cannot be made absent a court order and
that all content and material associated with these Internet domains and IP addresses is to be isolated and preserved pending resolution of the dispute.&nbsp; Plaintiffs seek a permanent injunction, other equitable relief and damages.&nbsp; Full copies of the pleading
documents are available at http://www.zeuslegalnotice.com/.
&nbsp;
NOTICE TO DEFENDANTS:&nbsp; READ THESE PAPERS CAREFULLY!&nbsp; You must &#8220;appear&#8221; in this case or the other side will win automatically.&nbsp; To &#8220;appear&#8221; you
must file with the court a legal document called a &#8220;motion&#8221; or &#8220;answer.&#8221;&nbsp; The &#8220;motion&#8221; or &#8220;answer&#8221; must be given to the court clerk or administrator within 21 days of the date of first publication of this notice.&nbsp; It must be in proper form and have proof of
service on the Plaintiffs&#8217; attorney, Gabriel M. Ramsey at Orrick, Herrington &amp; Sutcliffe LLP, 1000 Marsh Rd., Menlo Park, California, 94025,
gramsey@???, (650) 614-7361.&nbsp; If you have questions, you should consult with your own attorney immediately
&nbsp;
&nbsp;








&nbsp;
Gabriel M. Ramsey




Partner







Orrick, Herrington &amp; Sutcliffe
LLP



1000 Marsh Road


Menlo Park, CA 94025-1015



tel 650-614-7361


fax 650-614-7401


email
gramsey@???



www.orrick.com
&nbsp;

===========================================================
IRS Circular 230 disclosure: To ensure compliance with requirements
imposed by the IRS, we inform you that any tax advice contained in this
communication, unless expressly stated otherwise, was not intended or
written to be used, and cannot be used, for the purpose of (i) avoiding
tax-related penalties under the Internal Revenue Code or (ii) promoting,
marketing or recommending to another party any tax-related matter(s)
addressed herein.
===========================================================
NOTICE TO RECIPIENT: THIS E-MAIL IS MEANT FOR ONLY
THE INTENDED RECIPIENT OF THE TRANSMISSION, AND
MAY BE A COMMUNICATION PRIVILEGED BY LAW. IF YOU
RECEIVED THIS E- MAIL IN ERROR, ANY REVIEW, USE,
DISSEMINATION, DISTRIBUTION, OR COPYING OF THIS
E-MAIL IS STRICTLY PROHIBITED. PLEASE NOTIFY US
IMMEDIATELY OF THE ERROR BY RETURN E-MAIL AND
PLEASE DELETE THIS MESSAGE FROM YOUR SYSTEM.
THANK YOU IN ADVANCE FOR YOUR COOPERATION.
For more information about Orrick, please visit http://www.orrick.com/
===========================================================