Dynamoo's Blog

This fake bank spam downloads malware from file sharing site cubby.com : From:     Sammie Aaron [Sammie@rbs.com] Date:     11 June 2014...

[ NOTE: the IPs listed here appear to have been cleaned up] This set of IPs is being used to push the Angler EK [1] [2] : Intergen...

Thanks to a tip to investigate 199.68.199.178 I discovered that the Caphaw network I looked at yesterday is much bigger than I thought. T...

This fake Pinterest spam leads to a malicious download on alenikaofsa.ru : Date:      Wed, 16 Oct 2013 12:03:11 -0300 [11:03:11 EDT] F...

Here are a couple of IPs serving exploit kits.. the case in question is a legitimate site that loads code from 6rf.net and this in turn ...

I noticed 188.138.89.106 (Intergenia AG, Germany) was the originating IP being used in this spam run using a hijacked 1&1 account, a...

The following domains and IPs are currently being used as C&C servers by the Medfos family of trojans ( this one in particular): ...

These domains and IP addresses are connected to this malware spam run and belong to a group I call the " Amerika " gang (becaus...

Another NACHA spam, leading to malware on 85.25.189.174: From:     CarleySpan@hotmail.com Date:     19 April 2012 21:25 Subject:     ...

The domain hotmailbox.com often comes up when looking at malicious domains, it's a domain used to provide a bulletproof email address...