Dynamoo's Blog

So.. I saw some mysterious outbound traffic to event.swupdateservice.net/event ( 138.91.189.124 / Microsoft, US ). Googling around for th...

In the light of the growing Lenovo / Superfish fuss, I set out to identify those Superfish domains and IPs that I could, for the purposes...

Sometimes a spam comes through and it isn't immediately obvious what they are trying to do: From :    Brad Lorien [bclorien@ngcmp.c...

I noticed a whole load of queries in URLquery about adminsecret.monster.com (such as this one ) which I thought to be kind of odd.. ...

I've been plagued with these over the past few days, emails coming in with the following subjects: Underground XXX files Free porno ...

The IPs 89.248.164.219 (Ecatel, Netherlands) and 217.23.2.233 and (Worldstream, Netherlands) appear to be hosting some sort of bogus Fir...

A couple of network blocks came to my attention after investigating some adware ntlanmbn.exe ( VirusTotal report ) and GFilterSvc.exe ( ...

" Babylon and the 3954 Trojans " sounds like a swords and sandals epic, but unfortunately it's just another example of crap...

Never trust an ad network that uses anonymous WHOIS details. These are hosted on 108.161.189.161 (NetDNA, US) and all hide their details....

Never trust any sort of ad network that uses anonymous domains and hides all other identifying data. These seem to be doing to rounds at t...

Hotbar.com probably needs no introduction as an unpleasant piece of Slimeware , picked up from the ruins of Zango by a Washington State co...