Dynamoo's Blog

I've been seeing some injection attacks since last week utilising hosting services of VPS Hosting in Latvia. These are continuing tod...

There is currently some sort of injection attack against WordPress sites that is injected code into the site's .js files. Not so unusual...

Here another bunch of Cushion Redirect sites closely related to this attack a few weeks ago but this time hosted on 188.120.198.1 (IP4I...

This is some sort of malware using insecure OpenX ad servers to spread. Oh wait, insecure is pretty much the default configuration for Ope...

The forum of popular German IT news site pcwelt.de has been hacked and is sending visitors to the Angler exploit kit. Visitors to the f...

There's some sort of evil at work here, but I can't quite replicate it.. however I would recommend that you put a block in for 173...

This kind of attack is nothing new, but there has been a sharp uptick recently in injection attacks that alter .js files on vulnerable sys...

A couple of injection attacks seem to be in progress, I haven't quite got to the bottom of them yet.. but you might want to block the ...

These IPs and domains seem to be involved in injection attacks today. I recommend you block them. 64.120.242.178 188.226.132.70 93.189...

The following IPs and domains appear to be in use for spreading exploit kits via injection attacks - 108.178.7.118 (Singlehop, US) [1] [...

I don't like the look of this [urlquery], seems to be the payload site for some sort of injection attack. Might be worth blocklisting 8...

69.64.39.166 (Hosting Solutions International, US) appears to be hosting an exploit kit (possibly Fiesta ) according to URLquery reports ...

A few days ago I wrote about some ongoing injection attacks that were leading to Adscend Media LLC ads. Adscend say that the affiliate us...

Over the past few days I have seen several cases where legitimate websites have had .js files interfered with in order to serve up somethi...

A very quick write-up about some suspect activity on 194.28.175.129 (BESTHOSTING-AS ON-LINE Ltd, Ukraine) which appears to be hosting som...

Popular Italian weather site ilmeteo.it appears to have been compromised this morning, with several legitimate .js files on the site alte...

It looks like there is some sort of exploit kit on 192.95.1.190 (OVH, Canada) [ example ] spreading through injection attacks although at...

46.19.139.236 (Private Layer Inc, Switzerland) seems to be serving up some sort of Java exploit kit via injection attacks which is utilis...

This injection attack [urlquery] on boats.net caught my attention, a nasty bit of injected code pointing to a (now suspended) domain cal...

The server at 162.211.231.16 (IT7 Networks, Canada) is currently being used in injection attacks ( example ) which have been going on for...