Dynamoo's Blog

This fake DPD message contains a link leading to an exploit kit. From:     DPD Services [dpd_support@nikos-fahrschule.com] Reply-to:   ...

I haven't had time to look at this fully, but it seems that a fresh round of Asprox attacks have started after several months of inactiv...

Another domain to look for in SQL injection attacks is dbrgf.ru , still calling script.js . Checking your proxy logs for ".ru/script.js...

A fresh round of SQL injections seem to be on the march, with (at least) two new domains being injected into vulnerable sites: www.lijg.ru ...

A new bunch of domains being used in SQL injection attacks at the moment: www.msngk6.ru www.dft6s.kz These are calling a script called style...

The Silent Noise blog reports that a fresh round of SQL injection attacks by the Asprox crew are under way. They seem to be using a variety...

There has been a shift overnight in the domains used in the Asprox SQL injection attack, the ones to look for are: 47mode.name berjke.ru 81d...

Another Asprox SQL injection domain to block / check for is lang42.ru . The following domains have been active in the past 24 hours: 53refer...

After being stable for some time, the Asprox SQL injection hacks are now redirecting through a new bunch of .ru domains. 30area.ru 4log-in.r...

The Asprox botnet is still active but has been remarkable stable with no new domains in the past week, and 88% of the traffic going to deryv...

Another bunch of Asprox domains that have been active over the past few days are listed below. As usual, block these or check your logs for ...

There has been a slight shift in tactics by the Asprox gang in their SQL Injection Attacks in that they are now using a packer on their java...

Briefly popping up on the Asprox SQL Injection radar yesterday was h3x.info, specifically a call to h3x.info/index.php [dangerous site, do...

mnbenio.ru is a new Asprox SQL injection domain that has been active in the past 24 hours, the following four domains are the most active: ...

The domains used in the Asprox SQL Injection attacks have been stable for a few days now, but yesterday some new .ru domains appeared: mnicb...

Another bunch of very fresh Asprox domains being used in the Asprox SQL Injection attack, registered at Naunet to email address retyi111@yah...

Possibly the final Asprox domain on the day in 64do.com - add this to your block or scan list.

Keep an eye out for these following Asprox domains, all recently registered to the email address druid00091@aol.com. Block them or scan your...

Another "druid00091@aol.com" domain (following on from this one and this one ) , this type 19ssl.net, which is being actively use...

The latest domain name used in the recent Asprox SQL Injection attacks appears to be 24aspx.com. Perhaps the Asprox guys are boasting a lit...