From time to time I check visitor referrals to botcrawl.com. In particular today I noticed someone detailing the website World.guns.ru / Modernfirearms.net / IP: 184.108.40.206/ (DO NOT VISIT) as the source of the FBI related ransomware infection, FBI Moneypak (Citadel Reveton).
I then researched World.guns.ru and notice they have been reported to contain malware as far back as January 27th, 2009.
Next I visited World.guns.ru using Aurora web browser (below). Upon loading the website many third party scripts ran, popups wanted to occur, and an uncommon amount of data was transferred. Simply by visiting the World.guns.ru homepage.
In conclusion I urge gun entuhisiest and internet users to stay away from World.guns.ru and Modernfirearms.net at all costs. These ransomware infections which can be contracted from World.guns.ru are extremely dangerous. Though I can not say for certain the operators behind World Guns/Modern Firearms are the perpetrators, it is certainly suspicious that malware has been distributed on their website for many years.
- To learn more about Ransomware removal, check out our Ransomware removal Guide.
Common Ransomware Infections: