Merge pull request #538 from chartingshow/NGate

Block `NGate` Android malware known to steal banking creds from iOS and Android via PWA apps
chartingshow · Aug 24, 2024 · e7d60cb · e7d60cb
2 parents 4ba79ad + fdf8e1d
commit e7d60cb
Show file tree

Hide file tree

Showing 6 changed files with 71 additions and 5 deletions.
diff --git a/src/blacklists/custom-ip-block-lists/ip-ngate.txt b/src/blacklists/custom-ip-block-lists/ip-ngate.txt
@@ -0,0 +1,21 @@
+# Crypto Firewall
+# Blocking Web Browser Crypto Malware and Phishing Websites
+#
+# Blocking: NGate Malware Custom List
+#
+# Homepage: https://github.com/chartingshow/crypto-firewall
+# Contribute: https://github.com/chartingshow/crypto-firewall/issues
+# License: GPL-3.0 license
+#
+# Last modified: 24 August 2024
+#
+
+104.21.7.213
+172.187.98.211
+172.67.182.151
+185.104.45.51
+185.181.165.124
+185.68.16.56
+188.114.96.9
+46.175.145.67
+91.222.136.153
diff --git a/src/blacklists/hosts.txt b/src/blacklists/hosts.txt
@@ -4,7 +4,7 @@
 # Contribute: https://github.com/chartingshow/crypto-firewall/issues
 # License: GPL-3.0 license
 #
-# Last modified: 17 July 2024
+# Last modified: 24 August 2024
 #
 
 # Extras (comment out if needed)
@@ -1406,6 +1406,7 @@
 0.0.0.0 app-lnloggen.online
 0.0.0.0 app-melis.io 
 0.0.0.0 app-token.im
+0.0.0.0 app.mobil-csob-cz.eu
 0.0.0.0 apparelalley.shop
 0.0.0.0 apparences-magazine.be
 0.0.0.0 appchi.top
@@ -2481,6 +2482,7 @@
 0.0.0.0 blackfox.lol
 0.0.0.0 blacklifestyle.net
 0.0.0.0 blackpinkmmexico.com
+0.0.0.0 blackrockapp.eu
 0.0.0.0 blackscreenrecords.shop
 0.0.0.0 blacksebo.de
 0.0.0.0 blacksmithbooks.com
@@ -3437,6 +3439,7 @@
 0.0.0.0 clickandanalytics.com
 0.0.0.0 clickermedia.org
 0.0.0.0 clickverifier.online
+0.0.0.0 client.nfcpay.workers.dev
 0.0.0.0 clientesdawebs.icu
 0.0.0.0 clientstaff.co
 0.0.0.0 cliffordandblu.com
@@ -4027,6 +4030,7 @@
 0.0.0.0 crytoratemark.com
 0.0.0.0 cs.com.sg
 0.0.0.0 csacricnp.xyz
+0.0.0.0 csas.georgecz.online
 0.0.0.0 csgodomain.us
 0.0.0.0 csgogen.com
 0.0.0.0 csgoxdomain.us
@@ -4087,6 +4091,7 @@
 0.0.0.0 cypher-tech.ca
 0.0.0.0 cypto-clearing.com
 0.0.0.0 cyrofx.com
+0.0.0.0 cyrptomaker.info
 0.0.0.0 czbrwa.geek
 0.0.0.0 czfloki.com
 0.0.0.0 czrlibr.xyz
@@ -7147,6 +7152,7 @@
 0.0.0.0 hiccup.shop
 0.0.0.0 hicloths.com
 0.0.0.0 hiconvanor.xyz
+0.0.0.0 hide-me.online
 0.0.0.0 hide.ovh
 0.0.0.0 hidratacaocapilar.makeup
 0.0.0.0 hidrosolar.space
@@ -10468,6 +10474,7 @@
 0.0.0.0 neyine376.com
 0.0.0.0 nezgoakker.com
 0.0.0.0 nfactoryoutlet.com
+0.0.0.0 nfc.cryptomaker.info
 0.0.0.0 nfiru.buzz
 0.0.0.0 nfiru.monster
 0.0.0.0 nfiru.site
@@ -11554,6 +11561,7 @@
 0.0.0.0 platformtrad.xyz
 0.0.0.0 platinumfxmarket.com
 0.0.0.0 platosgunleri.co.vu
+0.0.0.0 play-protect.pro
 0.0.0.0 play.estream.to
 0.0.0.0 play.estream.xyz
 0.0.0.0 play.gramombird.com
@@ -12156,6 +12164,7 @@
 0.0.0.0 ragsistemas.net
 0.0.0.0 ragsonline.shop
 0.0.0.0 rahatishop.com
+0.0.0.0 raiffeisen-cz.eu
 0.0.0.0 rainoglobal.com
 0.0.0.0 raipackers.com
 0.0.0.0 raissatec.ma

diff --git a/src/blacklists/nomalware-beta.txt b/src/blacklists/nomalware-beta.txt
@@ -1,7 +1,7 @@
 [Adblock Plus 2.0]
 ! Title: Crypto Firewall (Beta Version)
 ! Expires: 7 days (update frequency)
-! Last modified: 17 July 2024
+! Last modified: 24 August 2024
 ! Homepage: https://github.com/chartingshow/crypto-firewall/
 ! Contribute: https://github.com/chartingshow/crypto-firewall/issues
 ! License: GPL-3.0 license
@@ -1412,6 +1412,7 @@
 ||app-lnloggen.online^$third-party
 ||app-melis.io ^$third-party
 ||app-token.im^$third-party
+||app.mobil-csob-cz.eu^$third-party
 ||apparelalley.shop^$third-party
 ||apparences-magazine.be^$third-party
 ||appchi.top^$third-party
@@ -2492,6 +2493,7 @@
 ||blackfox.lol^$third-party
 ||blacklifestyle.net^$third-party
 ||blackpinkmmexico.com^$third-party
+||blackrockapp.eu^$third-party
 ||blackscreenrecords.shop^$third-party
 ||blacksebo.de^$third-party
 ||blacksmithbooks.com^$third-party
@@ -3446,6 +3448,7 @@
 ||clickandanalytics.com^$third-party
 ||clickermedia.org^$third-party
 ||clickverifier.online^$third-party
+||client.nfcpay.workers.dev^$third-party
 ||clientesdawebs.icu^$third-party
 ||clientstaff.co^$third-party
 ||cliffordandblu.com^$third-party
@@ -4038,6 +4041,7 @@
 ||crytoratemark.com^$third-party
 ||cs.com.sg^$third-party
 ||csacricnp.xyz^$third-party
+||csas.georgecz.online^$third-party
 ||csgodomain.us^$third-party
 ||csgogen.com^$third-party
 ||csgoxdomain.us^$third-party
@@ -4098,6 +4102,7 @@
 ||cypher-tech.ca^$third-party
 ||cypto-clearing.com^$third-party
 ||cyrofx.com^$third-party
+||cyrptomaker.info^$third-party
 ||czbrwa.geek^$third-party
 ||czfloki.com^$third-party
 ||czrlibr.xyz^$third-party
@@ -7156,6 +7161,7 @@
 ||hiccup.shop^$third-party
 ||hicloths.com^$third-party
 ||hiconvanor.xyz^$third-party
+||hide-me.online^$third-party
 ||hide.ovh^
 ||hidratacaocapilar.makeup^$third-party
 ||hidrosolar.space^$third-party
@@ -10477,6 +10483,7 @@
 ||neyine376.com^$third-party
 ||nezgoakker.com^$third-party
 ||nfactoryoutlet.com^$third-party
+||nfc.cryptomaker.info^$third-party
 ||nfiru.buzz^$third-party
 ||nfiru.monster^$third-party
 ||nfiru.site^$third-party
@@ -11566,6 +11573,7 @@
 ||platformtrad.xyz^$third-party
 ||platinumfxmarket.com^$third-party
 ||platosgunleri.co.vu^$third-party
+||play-protect.pro^$third-party
 ||playautumnd.xyz^$third-party
 ||playbhausatta.com^$third-party
 ||playboymutfak1.cloudns.ph^$third-party
@@ -12148,6 +12156,7 @@
 ||ragsistemas.net^$third-party
 ||ragsonline.shop^$third-party
 ||rahatishop.com^$third-party
+||raiffeisen-cz.eu^$third-party
 ||rainoglobal.com^$third-party
 ||raipackers.com^$third-party
 ||raissatec.ma^$third-party

diff --git a/src/blacklists/nomalware-full.txt b/src/blacklists/nomalware-full.txt
@@ -1,7 +1,7 @@
 [Adblock Plus 2.0]
 ! Title: Crypto Firewall (Full Version)
 ! Expires: 7 days (update frequency)
-! Last modified: 17 July 2024
+! Last modified: 24 August 2024
 ! Homepage: https://github.com/chartingshow/crypto-firewall/
 ! Contribute: https://github.com/chartingshow/crypto-firewall/issues
 ! License: GPL-3.0 license
@@ -1412,6 +1412,7 @@
 ||app-lnloggen.online^$third-party
 ||app-melis.io ^$third-party
 ||app-token.im^$third-party
+||app.mobil-csob-cz.eu^$third-party
 ||apparelalley.shop^$third-party
 ||apparences-magazine.be^$third-party
 ||appchi.top^$third-party
@@ -2492,6 +2493,7 @@
 ||blackfox.lol^$third-party
 ||blacklifestyle.net^$third-party
 ||blackpinkmmexico.com^$third-party
+||blackrockapp.eu^$third-party
 ||blackscreenrecords.shop^$third-party
 ||blacksebo.de^$third-party
 ||blacksmithbooks.com^$third-party
@@ -3446,6 +3448,7 @@
 ||clickandanalytics.com^$third-party
 ||clickermedia.org^$third-party
 ||clickverifier.online^$third-party
+||client.nfcpay.workers.dev^$third-party
 ||clientesdawebs.icu^$third-party
 ||clientstaff.co^$third-party
 ||cliffordandblu.com^$third-party
@@ -4038,6 +4041,7 @@
 ||crytoratemark.com^$third-party
 ||cs.com.sg^$third-party
 ||csacricnp.xyz^$third-party
+||csas.georgecz.online^$third-party
 ||csgodomain.us^$third-party
 ||csgogen.com^$third-party
 ||csgoxdomain.us^$third-party
@@ -4098,6 +4102,7 @@
 ||cypher-tech.ca^$third-party
 ||cypto-clearing.com^$third-party
 ||cyrofx.com^$third-party
+||cyrptomaker.info^$third-party
 ||czbrwa.geek^$third-party
 ||czfloki.com^$third-party
 ||czrlibr.xyz^$third-party
@@ -7156,6 +7161,7 @@
 ||hiccup.shop^$third-party
 ||hicloths.com^$third-party
 ||hiconvanor.xyz^$third-party
+||hide-me.online^$third-party
 ||hide.ovh^
 ||hidratacaocapilar.makeup^$third-party
 ||hidrosolar.space^$third-party
@@ -10477,6 +10483,7 @@
 ||neyine376.com^$third-party
 ||nezgoakker.com^$third-party
 ||nfactoryoutlet.com^$third-party
+||nfc.cryptomaker.info^$third-party
 ||nfiru.buzz^$third-party
 ||nfiru.monster^$third-party
 ||nfiru.site^$third-party
@@ -11566,6 +11573,7 @@
 ||platformtrad.xyz^$third-party
 ||platinumfxmarket.com^$third-party
 ||platosgunleri.co.vu^$third-party
+||play-protect.pro^$third-party
 ||playautumnd.xyz^$third-party
 ||playbhausatta.com^$third-party
 ||playboymutfak1.cloudns.ph^$third-party
@@ -12148,6 +12156,7 @@
 ||ragsistemas.net^$third-party
 ||ragsonline.shop^$third-party
 ||rahatishop.com^$third-party
+||raiffeisen-cz.eu^$third-party
 ||rainoglobal.com^$third-party
 ||raipackers.com^$third-party
 ||raissatec.ma^$third-party

diff --git a/src/blacklists/nomalware-lite.txt b/src/blacklists/nomalware-lite.txt
@@ -1,7 +1,7 @@
 [Adblock Plus 2.0]
 ! Title: Crypto Firewall (Lite Version)
 ! Expires: 7 days (update frequency)
-! Last modified: 17 July 2024
+! Last modified: 24 August 2024
 ! Homepage: https://github.com/chartingshow/crypto-firewall/
 ! Contribute: https://github.com/chartingshow/crypto-firewall/issues
 ! License: GPL-3.0 license
@@ -1412,6 +1412,7 @@
 ||app-lnloggen.online^$third-party
 ||app-melis.io ^$third-party
 ||app-token.im^$third-party
+||app.mobil-csob-cz.eu^$third-party
 ||apparelalley.shop^$third-party
 ||apparences-magazine.be^$third-party
 ||appchi.top^$third-party
@@ -2492,6 +2493,7 @@
 ||blackfox.lol^$third-party
 ||blacklifestyle.net^$third-party
 ||blackpinkmmexico.com^$third-party
+||blackrockapp.eu^$third-party
 ||blackscreenrecords.shop^$third-party
 ||blacksebo.de^$third-party
 ||blacksmithbooks.com^$third-party
@@ -3446,6 +3448,7 @@
 ||clickandanalytics.com^$third-party
 ||clickermedia.org^$third-party
 ||clickverifier.online^$third-party
+||client.nfcpay.workers.dev^$third-party
 ||clientesdawebs.icu^$third-party
 ||clientstaff.co^$third-party
 ||cliffordandblu.com^$third-party
@@ -4038,6 +4041,7 @@
 ||crytoratemark.com^$third-party
 ||cs.com.sg^$third-party
 ||csacricnp.xyz^$third-party
+||csas.georgecz.online^$third-party
 ||csgodomain.us^$third-party
 ||csgogen.com^$third-party
 ||csgoxdomain.us^$third-party
@@ -4098,6 +4102,7 @@
 ||cypher-tech.ca^$third-party
 ||cypto-clearing.com^$third-party
 ||cyrofx.com^$third-party
+||cyrptomaker.info^$third-party
 ||czbrwa.geek^$third-party
 ||czfloki.com^$third-party
 ||czrlibr.xyz^$third-party
@@ -7156,6 +7161,7 @@
 ||hiccup.shop^$third-party
 ||hicloths.com^$third-party
 ||hiconvanor.xyz^$third-party
+||hide-me.online^$third-party
 ||hide.ovh^
 ||hidratacaocapilar.makeup^$third-party
 ||hidrosolar.space^$third-party
@@ -10477,6 +10483,7 @@
 ||neyine376.com^$third-party
 ||nezgoakker.com^$third-party
 ||nfactoryoutlet.com^$third-party
+||nfc.cryptomaker.info^$third-party
 ||nfiru.buzz^$third-party
 ||nfiru.monster^$third-party
 ||nfiru.site^$third-party
@@ -11566,6 +11573,7 @@
 ||platformtrad.xyz^$third-party
 ||platinumfxmarket.com^$third-party
 ||platosgunleri.co.vu^$third-party
+||play-protect.pro^$third-party
 ||playautumnd.xyz^$third-party
 ||playbhausatta.com^$third-party
 ||playboymutfak1.cloudns.ph^$third-party
@@ -12148,6 +12156,7 @@
 ||ragsistemas.net^$third-party
 ||ragsonline.shop^$third-party
 ||rahatishop.com^$third-party
+||raiffeisen-cz.eu^$third-party
 ||rainoglobal.com^$third-party
 ||raipackers.com^$third-party
 ||raissatec.ma^$third-party