Dynamoo's Blog

This fake fax leads to TrickBot which appears to be similar to the Dyre banking trojan that we saw a lot of last year.. From :    Admi...

This terse fake financial spam is not from the awesomely-named Thunderbolts Limited but is instead a simple forgery with a malicious atta...

This fake fax spam comes with a malicious attachment: From     "UK2Fax" [fax2@fax1.uk2fax.co.uk] Date     Thu, 10 Sep 2015 14...

This fake fax spam comes from random senders - company names and attachment names vary from spam to spam. From : "Heaney, Vandervo...

This fake fax message leads to malware: From :    Incoming Fax [Incoming.Fax@victimdomain] Date :    18 September 2014 at 08:39 Subje...

These two spam email messages have the same malicious payload: From :    Administrator@badeleke [Administrator@victimdomain] To :    b...

This fake fax spam leads to malware: From :    eFax [message@inbound.efax.com] To :    administrator@victimdomain Date :    17 July 2...

Apparently the Australian Taxation Office thinks I have a fax.. or perhaps it is something more sinister? From :    Australian Taxation...

There's another batch of "MyFax" spam going around at the moment, for example: From :    MyFax [no-replay@my-fax.com] Dat...

This fake fax run is a variation of this one from yesterday. From:    Fax [no-replay@fax-voice.com] Date:    9 January 2015 at 14:52...

I am endebted to several people for help with this (not all of whom I can mention). It is similar to this recent spam run analysed by T...

This fake fax spam leads to malware: From :    Fax [no-replay@my-fax.com] Date :    19 December 2014 at 15:37 Subject :    Employee Doc...

Fax spam again. How quaint. This spam appears to come from the person receiving it (which is an old trick ). From : victim@victimdomain...

Hang on, I think I need to load some more papyrus into the facsimile machine, the 1990s are back! From :     Incoming Fax [no-reply@efa...

This fake fax spam comes with a malicious attachment From :     Interfax [uk@interfax.net] Date :     13 November 2014 20:29 Subject ...

Another day, another fake fax spam. From :     Fax [fax@victimdomain.com] To :     luke.sanson@victimdomain.com Date :     24 October 20...

A couple of unimaginative spam emails leading to a malicious payload. You have received a new secure message from BankLine From:     B...

A pair of malware spams this morning, both with the same payload: "You've received a new fax" From:     Fax [fax@victimd...

The daily mixed spam run has just started again, these two samples seen so far this morning: NatWest: "You have a new Secure Mess...

Whoever is running this spam run is evolving it day after day, with different types of spam to increase clickthrough rates and now some tr...