Showing posts with label Brazil. Show all posts
Showing posts with label Brazil. Show all posts
Friday, 10 June 2016

Malware spam: ". CARTÓRIO POSTAL. Apontamento de Protesto. 10/06/2016 17:42:46"

›
This Portuguese-language spam leads to malware: From :    formacion@salesianos-madrid.com Date :    10 June 2016 at 21:42 Subject :    ...
Friday, 22 April 2016

Malware spam: Your Amazon.co.uk order has dispatched (#525-2814418-9619799)

›
This fake Amazon email leads to malware. On some mail clients there may be no body text: From : auto-shipping@amazon.co.uk Amazon.co.uk...
1 comment:
Thursday, 21 April 2016

Malware spam: "Dispatched Purchase Order" / FSPRD@covance.com

›
This fake financial spam does not come from Covance but is instead a simple forgery with a malicious attachment: From :    FSPRD@covan...
17 comments:

Malware spam: "BalanceUK_INVOICE_X002380_1127878" / adminservices@grouphomesafe.com

›
This fake financial spam does not come from BalanceUK Limited but is instead a simple forgery with a malicious attachment: From :    a...
Wednesday, 17 February 2016

Malware spam: Fwd:Accumsan Neque LLC Updated Invoice / Please turn on the Edit mode and Macroses!

›
This malware spam may come from several different companies, but I have only a single sample. It is notable for the mis-spelling of "...
Tuesday, 19 January 2016

Malware spam: "Thank you for purchasing from Cheaper Travel Insurance - 14068156"

›
This fake financial spam comes with a malicious attachment: From     info17@Resellers.insureandgo.com Date     Tue, 19 Jan 2016 14:...
Tuesday, 15 December 2015

Malware spam: "Invoice Attached" / "Accounting Specialist| Bank of America, N.A., Cabot Oil & Gas Corp."

›
This fake financial spam has a malicious attachment: From :    Ernestine Harvey Date :    15 December 2015 at 11:34 Subject :    Invo...
1 comment:
Thursday, 18 June 2015

Malware spam: "NOTA FISCAL ELETRÔNICA COD. 6Uhrae.088693" / "sac.contact4e74974737@bol.com.br"

›
These Portuguese-language spam pretends to be some sort of banking invoice aim, but instead leads to malware hosted on Google Drive. The t...
Monday, 11 August 2014

"Ministerio Publico federal 11 08 2014 07:35" spam / informativoministeriopublico.info

›
This Portuguese-language spam originates from a Brazilian-IP address and has a somewhat convincing domain of informativoministeriopublico....
Sunday, 2 March 2014

Malware sites to block 2/3/14

›
These domains and IPs are all connected with this gang , some of it appears to be involved in malware distribution, fraud or other illegal...
Friday, 25 October 2013

Malware sites to block 25/10/2013

›
This list replaces this one , and mostly contains domains and IPs connected with this gang . The list starts with IPs and web hosts, follo...
1 comment:
Monday, 14 October 2013

Malware sites to block 14/10/2013

›
It's been a while since I trawled around the activities of the "Amerika" gang , but here is a new set of malicious domains a...
Tuesday, 24 September 2013

Malware sites to block 24/9/2013

›
The malicious IPs and domains on this list are operated by this gang , and it replaces the list last week . 5.135.42.104 (OVH, Netherlan...
Tuesday, 17 September 2013

Malware sites to block 17/9/13

›
This set of malicious IPs and domains is associate with this gang , and the list replaces the last one published here . 24.173.170.230 (...
Monday, 9 September 2013

Malware sites to block 9/9/13

›
These domains and IPs are associated with this gang , this list supersedes (or complements) the one I made last week . 1.209.108.29 (BOR...
Tuesday, 13 August 2013

Malware sites to block 13/8/13

›
These IPs and domains belong to this gang and this list follows on from the one I made last week . 5.39.14.148 (OVH, France) 5.231.57.2...
Tuesday, 6 August 2013

Pharma sites to block 6/8/13

›
A new list of pharma sites and IPs, related to this bunch . 61.150.109.186 (China Telecom, China) 91.199.149.238 (Novosibirsk A3 Ltd, Ru...
Wednesday, 31 July 2013

"Documento importante : 5039403 !!" spam / Planilha-Documento.docx_.rar

›
This terse Portuguese language spam has a malicious attachment: From:     Adriane Camargo. [adriane@yahoo.com.br] Date:     29 July 20...
Friday, 5 July 2013

EBC "Password Reset Confirmation" spam / paynotice07.net

›
This fake password reset spam leads to malware on paynotice07.net : From: EBC_EBC1961Registration@ebank6.secureaps.com Sent: 05 July 2...