Cyber-criminals have migrated to "ce.ms" domains away from "co.cc" and hosting malware on them following Google's act of thwarting the co.cc domains, Zscaler the security company observes.
Indeed, Zscaler spotted several ce.ms domains that were abusing different familiar client-side security flaws.
Utilizing randomly named domain names, the crooks have inserted confusing JavaScript malware into them a few of which include "hxxp://hhhjjjjj111111.ce.ms/main.php?page=423b262d0a1a9f70" and "hxxp://27glshegbslijels.ce.ms/main.php?page=66c6ce3c7bc4b20c," say.
...
