Well it doesn’t appear that this attack is spreading. I just did a Google search on one of the redirect domains and it showed only 14,000 pages. Not as efficient as the last one that blasted several hundred thousand pages. Still see some of the same names on this list and it seems that the smaller organizations who probably don’t have full time staff to work on them and may not even know their sites have been compromised. Here is a short list of a few of the domains that still are making an appearance in Google. Remember that they may have been cleaned and Google hasn’t caught up with their spiders.
hxxp://www.wiredseniors.com
hxxp://www.moviesunlimited.com
hxxp://www.seniorstravelguide.com
hxxp://www.cancerissues.com
hxxp://www.reducecholesterol.org
hxxp://www.coloradowheelchairsports.org
hxxp://www.peta.org (All you PETA freaks can still go there though. Happy Surfing. All my friends stay clear)
hxxp://www.seniorshomeexchange.com
hxxp://www.adhdissues.com
hxxp://www.goodtime-tickets.com
hxxp://www.matcmadison.edu
hxxp://www.coolbuddy.com
I’ll give an update on this if things pick up. If you want to see the number of sites infected Google with
winzipices.cn and you’ll get a pretty long list. Stay away unless you want your PC compromised. Stay safe and take care.