Dynamoo's Blog

This fake Citi spam contains a malicious attachment: Date:      Mon, 19 Aug 2013 20:24:27 +0000 [16:24:27 EDT] From:      "secure.e...

This fake Facebook spam follows on from this one , but has a different malicious landing page at frankcremascocabinets.com : From:     ...

I was a little curious as to why I kept coming across Jolly Works Hosting from the Philippines when it came to malware hosting. They are a ...

This fake weather spam leads to malware on artimagefrance.com : Date:      Fri, 26 Jul 2013 02:46:26 -0800 [06:46:26 EDT] From:      &q...

This fake eBay email leads to malware on artimagefrance.com : Date:      Fri, 26 Jul 2013 21:40:48 +0900 [08:40:48 EDT] From:      eBay ...

This fake fax report spam (apparently from the Administrator at the Victim's domain) leads to malware on 2013vistakonpresidentsclub....

This fake USPS spam contains a malicious attachment: Date:      Thu, 6 Jun 2013 10:43:56 -0500 [11:43:56 EDT] From:      USPS Express ...

184.95.51.123 (Secured Servers LLC, US / Jolly Works Hosting, Philippines) appears to be trying to serve the Blackhole Exploit kit throug...

This bunch of IPs and domains are being used in a series of fairly well-targeted attacks involving malicious spam messages that look like ...

Yet more ADP-themed spam, this time leading to malware on 184.164.151.54 : Date:      Fri, 12 Oct 2012 14:48:18 +0530 From:      "...

These fake fax messages lead to malware on 184.164.136.147 : Date:      Thu, 04 Oct 2012 19:00:16 +0200 From:      "eFax.Alert&qu...