Moneysavingexperthotels.world
Join Date: Feb 2015
Posts: 4,455
Sounds like eGobbler:
Quote:
This group has a tendency to ramp up their buying around holidays and weekends. Typically these campaigns peak in volume over a period of 36–48 hours before going into a state of hibernation until the next big push.
For this wave of attacks, eGobbler is easily recognized by their use of the “.world” TLD for their landing pages.
https://blog.confiant.com/massive-eg...s-a534b95a037f
