EXCLUSIVE - The Malware Hitlist

The following list is a historical look at Backoff and similar malware over the past few months. Many Retailers have been affected by this malware and the list appears to be growing rapidly. This is a 3 month time slice of malware that was detected by sensors and reported by third parties. Please keep in mind that these reports are only as accurate as the whois records and many of the offending host have been taken offline. No additional information will be released at this time.


VPLS Hosting Company - Multiple
TeleDanmark
JSC VimpelCom
Wrangler Forum
LG DACOM Corporation
Boeing
Lockheed Martin Corporation - Multiple
Hyundai Corporation
Military Networks - Multiple
OVH SAS
QUAL.IT S.A.S.
Jimmy Johns - Multiple
Department of Veterans Affairs - Multiple
Netago - Multiple
City of Georgetown Texas
USIS
L3 Communications
ANL - Multiple (Government)
Leon Lundberg
EGI Hosting
Korea Telecom
LinkedIn
Supervalu
City of Phoenix, Arizona
Sheetz Inc
Northrop Grumman Corporation
KDDI Corporation
CNCGroup China - Multiple
SONY - Multiple
P.F. Chang's - Multiple
RN Data
RMMI Inc
Starbucks- Multiple
INULOGIC France
Feedly
Yahoo
Ross Department Stores
Goodwill - Multiple
Harvard Business School
Evernote
Nieman Marcus
OVH Systems
Ionity Corporation
ACME
City of Atlanta GA
Amazon
Astro Telecommunications
Michaels Corporation
US Army Colo
VolumeDrive
Qutar Petroleum - Multiple
Extended Care Allscripts - Multiple
Western Union - Multiple
United Parcel Service - Multiple
Bartell Hotels - Multiple
US Airways
Aria Telecom
Dairy Queen - Multiple
City of Los Angeles CA
Department of Energy
LA Police Department - Multiple
Aaron Brothers
IRS
NRC Systems
NDC Systems
Prudential
OPM
Sears/KMart - Multiple
Home Depot - Multiple
Amazon Web Services - Multiple


Additional Entities:
Visafone Communications Limited
Korea Telecomm - Multiple