I'm getting similar attack:
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
11/12/2017 11:20:35 AM,High,An intrusion attempt by camcojb.com was blocked.,Blocked,No Action Required,Web Attack: JSCoinminer Download 6,No Action Required,No Action Required,"camcojb.com (107.6.190.220, 80)",lateral-g.net/forums/forumdisplay.php4?f=14,"DESKTOP-PLFNOHQ (192.168.1.93, 54243)",camcojb.com (107.6.190.220),"TCP, www-http"
Network traffic from <b>lateral-g.net/forums/forumdisplay.php4?f=14</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.
|