Showing posts with label Hungary. Show all posts
Showing posts with label Hungary. Show all posts
Wednesday, 7 September 2016

Malware spam: "Agreement form" leads to Locky

›
This fake financial spam leads to malware: Subject :     Agreement form From :     Marlin Gibson Date :     Wednesday, 7 September 20...
Monday, 5 September 2016

Malware spam: "We are sending you the credit card receipt from yesterday. Please match the card number and amount."

›
This fake financial spam has a malicious attachment: From :    Tamika Good Date :    5 September 2016 at 08:43 Subject :    Credit car...
Tuesday, 16 February 2016

Malware spam: fmis@oldham.gov.uk / Remittance Advice : Tue, 16 Feb 2016 14:18:52 +0530

›
This spam does not come from Oldham Council but is is instead a simple forgery with a malicious attachment. The timestamp in the subject l...
4 comments:
Friday, 12 February 2016

Malware spam: "DVSA RECEIPT" / FPO.CC.15@vosa.gsi.gov.uk

›
This spam email does not come from a UK government agency, but is instead a simple forgery with a malcious attachment. Note that the sende...
4 comments:
Thursday, 11 February 2016

Malware spam: "Scan from KM1650" / "Please find attached your recent scan" / "scanner@victimdomain.tld"

›
This fake document scan leads to malware. It appears to originate from within the victim's own domain, but it is just a simple forgery...
3 comments:

Malware spam: "INT242343 Unpaid Invoice - Your Services May Be Suspended" / payments@wavenetuk.com

›
This spam does not come from Wavenet Group but is instead a simple forgery with a malicious attachment: From     payments [payments@wa...
5 comments:
Wednesday, 10 February 2016

Malware spam: Emailing: MX62EDO 10.02.2016 / documents@dmb-ltd.co.uk

›
This spam has a malicious attachment: From     documents@dmb-ltd.co.uk Date     Wed, 10 Feb 2016 11:12:41 +0200 Subject     Emailing: M...
1 comment:
Thursday, 7 November 2013

Fake "Financial Times Survey Team" spam / ft-survey.com and AlfainHost

›
This fake Financial Times spam is a bit of a mystery: From: The Financial Times [mailto:ft448516@surveymonkey.com] Sent: Thu 07/11/201...
Thursday, 21 March 2013

"Data Processing Service" spam / airtrantran.com

›
This spam leads to malware on Date:      Thu, 21 Mar 2013 15:55:22 +0000 [11:55:22 EDT] From:      Data Processing Service [customerser...
2 comments:
Monday, 18 March 2013

Malware spam "New Pope Sued For Not Wearing Seat Belt In Popemobile" / webpageparking.net

›
This pope themed spam leads to malware on webpageparking.net : Date :      Mon, 18 Mar 2013 20:20:54 +0200 From :      "CNN Break...
Friday, 14 December 2012

Something evil on 87.229.26.138

›
This seems to be a bunch of evil domains on 87.229.26.138 (Deninet, Hungary) being used in injection attacks. Possible payloads include B...
Wednesday, 23 November 2011

Virus: "Help! I'm in trouble!"

›
Another virus-laden email, technically very similar to this one yesterday : Date: Wed, 23 Nov 2011 08:28:46 +0700 From: Saffi@victimdoma...
1 comment:

Virus: "Hello! Look, I've received an unfamiliar bill, have you ordered anything?"

›
Here's a piece of fairly clever social engineering: Date:      Tue, 22 Nov 2011 12:48:52 +0200 From:      "LILLIE Stinson" ...
Wednesday, 21 September 2011

Evil network: RONET / ro-net.eu (91.229.90.0/23)

›
RONET (aka. ro-net.eu) seems to be a new netblock occupying the 91.229.90.0/23 (91.229.90.0 - 91.229.91.255) range. This block has several ...
Tuesday, 26 April 2011

Evil network: Leksim Ltd / RELNET-NET AS5577 (62.122.72.0/21)

›
Implicated in malware distribution, botnet C&Cs and spam, the network range 62.122.72.0/21 (62.122.72.0 - 62.122.79.255) is currently qu...
1 comment: