Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Possible new worm activity - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Possible new worm activity
Wanting to know if anyone else has seen this type of activity from a pc. We have (now 2) user pc running windows 10 (Corporate access, but byod) having an issue accessing an intranet site. They are using Firefox, dns resolution from servers is correct, other machines on same subnet not having any issues. They get a page with a blue bar on top that says "Blocked because of admin action" below that it says "Your system administrator has blocked your computer or device. Please contact your system administrator." To make this more interesting, do a google search for "blocked because of admin action" and you get this inserted in 2 pages of unrelated web sites, most outside us. Link to screenshot https://imgur.com/a/Jbu0H Anonymous

Sign Up for Free or Log In to start participating in the conversation!