From time to time I check visitor referrals to botcrawl.com. In particular today I noticed someone detailing the website World.guns.ru / Modernfirearms.net / IP: 85.10.199.166/ (DO NOT VISIT) as the source of the FBI related ransomware infection, FBI Moneypak (Citadel Reveton).
Source: http://w3digger.com/i-need-help-immediately.html
I then researched World.guns.ru and notice they have been reported to contain malware as far back as January 27th, 2009.
Source: http://www.gunatics.com/forums/off-topic-forum/4728-stay-away-world-guns-ru.html
Next I visited World.guns.ru using Aurora web browser (below). Upon loading the website many third party scripts ran, popups wanted to occur, and an uncommon amount of data was transferred. Simply by visiting the World.guns.ru homepage.
In conclusion I urge gun entuhisiest and internet users to stay away from World.guns.ru and Modernfirearms.net at all costs. These ransomware infections which can be contracted from World.guns.ru are extremely dangerous. Though I can not say for certain the operators behind World Guns/Modern Firearms are the perpetrators, it is certainly suspicious that malware has been distributed on their website for many years.
- To learn more about Ransomware removal, check out our Ransomware removal Guide.
Common Ransomware Infections:
- Cloudflare Says Anthropic Mythos Can Chain Bugs Into Working Exploits
- DigiCert Revokes 60 Code Signing Certificates After Support Malware Incident
- ClickUp Data Leak Shows $4B Came Before Customer Security for Over a Year
- Fast16 Malware Targeted Microsoft Windows Engineering Software Before Stuxnet
- eBay DDoS Claim Follows Marketplace Outage Reported by Users
Related Posts
2 Comments
coman popo
I have emailed the webmaster and creator of Modern Firearms about this. I said he might want to email you about it, so you might want to look out for an email from an admin@modernfirearms.net, with the name “Max Popenker”.