Re: Question regarding Marketscore spyware

[Gary Dobbins <dobbins () ND EDU>]

BTW, we've also applied this trick to misdirect access attempts to known
phishing sites.  When someone is 'successfully' duped into actually
clicking the link offered by a phish-mail, they instead get our friendly
webpage which describes why one should be suspicious of such emails.



Tom Klimek wrote:
> Packeter class definition:
>
> Class ----> Marketscore
> Protocol--> IP
> Service --> HTTP
> Location -> Outside
>
> Host List -> Marketscore
> (containing:)
>
> 66.119.33.134
> 66.119.33.135
> 66.119.33.136
> 66.119.33.138
> 66.119.33.139
> 66.119.33.166
> 66.119.33.168
> 66.119.34.38
> 66.119.34.39
> 66.119.34.40
> 66.119.34.42
> 66.119.41.71
> 66.119.41.74
>
> Policy: Never-Admit
> Web-redirect
>
>
> Tom Klimek
> Associate Director, Network Engineering
> University of Notre Dame
> 204 Security Building
> Notre Dame, IN 46556
> (574) 631-8277
> tklimek () nd edu
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Discussion Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeff Kell
> Sent: Thursday, December 02, 2004 2:42 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Question regarding Marketscore spyware
>
> Gary Dobbins wrote:
>
>
> > Same here - works for us. We use Packeteer for the redirect, but same
> > effect.
>
>
> Care to share your class definition?
>
> Jeff Kell
> University of Tennessee at Chattanooga
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion
> Group discussion list can be found at http://www.educause.edu/groups/.
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
> http://www.educause.edu/groups/.

--

  ------------------------------------------------------------
  Gary Dobbins, CISSP -- Director, Information Security
  University of Notre Dame, Office of Information Technologies

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.