Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: 404dnserror Adware - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
404dnserror Adware
Our read Tom sent us a note about a site called "404dnserror/dot/com" (DO NOT VISIT).

A user of his was infected with some spyware/adware. It kept redirecting them to the '404dnserror' page. The page looks like a generic server error, but also advertises an anti-spyware tool in the form of an ActiveX like installer toolbar at the top of the page. To save you the risk of exposing yourself to the site, I included a screen shot below (click on the image to see the full page).

Its probably save to block/montor access to this domain.

I will be teaching next: Application Security: Securing Web Apps, APIs, and Microservices - SANS London June 2022


4478 Posts
ISC Handler
Dec 1st 2006

Sign Up for Free or Log In to start participating in the conversation!