Dynamoo's Blog

This fake FedEx (or FeDex?) spam has a malicious attachment: From :    Secure-FeDex Date :    8 June 2016 at 18:17 Subject :    David B...

These fake security warnings come with a malicious attachment: From :    Jennings.KarlaVk@ttnet.com.tr Date :    24 May 2016 at 11:48 ...

This fake Amazon email leads to malware. On some mail clients there may be no body text: From : auto-shipping@amazon.co.uk Amazon.co.uk...

This fake financial spam does not come from Covance but is instead a simple forgery with a malicious attachment: From :    FSPRD@covan...

This fake financial spam does not come from Beerhouse Self Drive but is instead a simple forgery with a malicious attachment: From :  ...

This fake financial spam comes with a malicious attachment: From:    Jennie bowles Date:    10 March 2016 at 12:27 Subject:    GreenLand...

These fake financial spam emails come from random sources with different names and reference numbers: From :    Melisa Keller Date :  ...

This fake financial spam comes with a malicious attachment: From:    Orval Burgess Date :    8 March 2016 at 11:10 Subject :    Compe...

This very convincing looking email pretending to be from RS has a malicious attachment. Although the email looks genuine, it is a simple for...

The Royal Bank of Scotland has been spoofed several times recently, this latest fake spam contains a payload that looks like it might be C...

Popular Italian weather site ilmeteo.it appears to have been compromised this morning, with several legitimate .js files on the site alte...

These domains and IPs are associated with this gang , this list supersedes (or complements) the one I made last week . 1.209.108.29 (BOR...

A couple of days ago I recommended blocking 195.110.124.133 (Register.it, Italy) as a malware C&C server. It turns out that I didn...

This is a refresh of this list of domains and IPs controlled by what I call the " Amerika " gang, and it follows on from this B...

These domains and IP addresses are connected to this malware spam run and belong to a group I call the " Amerika " gang (becaus...

This fake Amazon spam leads to malware on ehrap.net : Date:      Tue, 7 May 2013 22:54:26 +0100 [05/07/13 17:54:26 EDT] From:      ...

This spam leads to malware on giimiiifo.ru : Date:      Wed, 13 Mar 2013 06:49:25 +0100 From:      LinkedIn Email Confirmation [emailco...

This spam leads to malware on giminkfjol.ru: From: user@victimdomain.com Sent: 12 March 2013 04:19 Subject: Re: End of Aug. Stat. Requi...

There's quite a bit of malware coming from a range of Singlehop IPs over the past few days. The range is 108.178.59.0/26 (108.178.59.0...

These sites and IPs seem to be distributing some sort of Zeus variant. In this case users are being enticed to download a file called Fattur...