tag:blogger.com,1999:blog-804714437673009003.post6727682995085897610..comments2024-02-23T09:06:13.967+00:00Comments on Dynamoo's Blog: Multiple spam emails using malicious XLS or XLSM attachmentUnknownnoreply@blogger.comBlogger3125tag:blogger.com,1999:blog-804714437673009003.post-36953640489887524782015-02-19T13:09:48.240+00:002015-02-19T13:09:48.240+00:00Another variant on this one today with the same ca...Another variant on this one today with the same cab file being pulled from http.../kwefewef/fgdsee/dxzg.jpg <br /><br />Subject heading on today's look like this: Your order is ready for shipment T/N:JQ6554_811 Anonymoushttps://www.blogger.com/profile/17388277524133163376noreply@blogger.comtag:blogger.com,1999:blog-804714437673009003.post-44764088739396243422015-02-18T16:28:21.448+00:002015-02-18T16:28:21.448+00:00Sterling work Dynamoo. In addition to your blockli...Sterling work Dynamoo. In addition to your blocklist I detected 5 variants today connecting to the following C2 IPs:<br /><br />176.31.28.235<br />95.163.121.73<br />188.120.226.6<br />130.241.34.98smokedPhishhttps://www.blogger.com/profile/00500380788219965432noreply@blogger.comtag:blogger.com,1999:blog-804714437673009003.post-84757937719183911022015-02-18T14:46:28.570+00:002015-02-18T14:46:28.570+00:00Additional Subject pattern: Invoice ID:Z999999_99...Additional Subject pattern: Invoice ID:Z999999_999Anonymoushttps://www.blogger.com/profile/17388277524133163376noreply@blogger.com