ATECH-SAGADE Badness - Malicious .IN Campaign

Active exploit-kit campaign observed: multiple .IN domains hosted on ATECH-SAGADE netblocks (notably 91.188.60.0/24 and 85.234.190.0/24) are serving SUTRA-like exploits (including CVE-2009-0927 and CVE-2007-5659) to deliver trojan downloaders, FakeAV and other payloads for pay-per-install monetization; the report provides IPs, example domains, WHOIS details, ActiveX CLSIDs and external analysis references (Wepawet, VirusTotal).