tag:blogger.com,1999:blog-804714437673009003.post5991160008579024161..comments2024-02-23T09:06:13.967+00:00Comments on Dynamoo's Blog: Malware spam: "Berendsen UK Ltd Invoice 60020918 117" / "donotreply@berendsen.co.uk"Unknownnoreply@blogger.comBlogger2125tag:blogger.com,1999:blog-804714437673009003.post-71506876183073456152015-02-24T21:05:28.115+00:002015-02-24T21:05:28.115+00:00Interesting HTTP traffic attempted right after exp...Interesting HTTP traffic attempted right after exploit. Columns are Web_Method, URL, Response_Code, and Referrer:<br /><br />'POST','http://gW9j6v8uU9R8QxDE biz/','403','https://pinterest.com/'<br />'POST','http://rTD6oBh biz/','403','https://aol.com/'<br />'POST','http://jbL7S61V net/','403','http://Anonymoushttps://www.blogger.com/profile/17388277524133163376noreply@blogger.comtag:blogger.com,1999:blog-804714437673009003.post-78895950513124684322015-02-24T18:08:53.530+00:002015-02-24T18:08:53.530+00:00Senders:
donotreply@berendsen.co.uk
andy@icotherm....Senders:<br />donotreply@berendsen.co.uk<br />andy@icotherm.co.uk<br />pachuckaizabela@arsenalltd.pl<br /><br />Subjects:<br />Berendsen UK Ltd Invoice 60020918 117<br />Board Order - PO15028<br />document do confirm<br /><br />Attachments:<br />IRN001549_60020918_I_01_01.xls <br />SCAN_20150224_100752437.xls <br />roexport.xls <br />RN001549_60020918_I_01_01.doc<br />SCAN_20150224_100752437.doc<Anonymoushttps://www.blogger.com/profile/17388277524133163376noreply@blogger.com