Showing posts with label Korea. Show all posts
Showing posts with label Korea. Show all posts
Monday, 30 November 2015

Malware spam: "INTUIT QB" / "QUICKBOOKS ONLINE [qbservices@customersupport.intuit.com]" leads to ransomware

›
This fake Intuit QuickBooks spam leads to malware: From :    QUICKBOOKS ONLINE [qbservices@customersupport.intuit.com] Date :    30 Nov...
Wednesday, 8 April 2015

Malware spam: "Invoice from COMPANY NAME" / 31.24.30.12 / 46.30.43.102

›
This Dridex spam takes a slightly different approach from other recent ones. Instead of attaching a malicious Office document, it download...
Thursday, 2 April 2015

Malware spam: "Scanned document from HP/Brother/Epson Scanner [87654321]"

›
These fake scanner emails follow a well-established pattern. Instead of containing a scanned document they have a malicious attachment. ...
Thursday, 19 March 2015

Malware spam: "sales@marflow.co.uk" / "Your Sales Order"

›
This spam run pretends to come from Marflow Engineering but it doesn't, instead it is a simple forgery. Marflow are not sending out t...
6 comments:
Sunday, 2 March 2014

Malware sites to block 2/3/14

›
These domains and IPs are all connected with this gang , some of it appears to be involved in malware distribution, fraud or other illegal...
Tuesday, 24 September 2013

Malware sites to block 24/9/2013

›
The malicious IPs and domains on this list are operated by this gang , and it replaces the list last week . 5.135.42.104 (OVH, Netherlan...
Tuesday, 17 September 2013

Malware sites to block 17/9/13

›
This set of malicious IPs and domains is associate with this gang , and the list replaces the last one published here . 24.173.170.230 (...
Monday, 9 September 2013

Malware sites to block 9/9/13

›
These domains and IPs are associated with this gang , this list supersedes (or complements) the one I made last week . 1.209.108.29 (BOR...
Tuesday, 13 August 2013

Malware sites to block 13/8/13

›
These IPs and domains belong to this gang and this list follows on from the one I made last week . 5.39.14.148 (OVH, France) 5.231.57.2...
Tuesday, 23 July 2013

Malware sites to block 23/7/13

›
These malicious domains and IPs are associated with this prolific gang .  As usual, I've listed IPs with hosts first and then a plain ...
1 comment:
Thursday, 18 July 2013

K&L Wine Merchants (KLWines.com) spam / prysmm.net

›
This fake K&L Wine Merchantsm spam email leads to malware on www.klwines.com.order.complete.prysmm.net : Date:      Thu, 18 Jul 20...
Friday, 12 July 2013

"TAX Return Reminder" / cpa.state.tx.us.tax-returns.mattwaltererie.net

›
This fake tax return reminder leads to malware on cpa.state.tx.us.tax-returns.mattwaltererie.net : --- Version 1 -------------------- ...
Monday, 24 June 2013

DanielMcClintic@hotmail.com fake job offer

›
Another staggeringly crude money mule recruitment spam, like this one . Unless you like prison food I would advise you to leave this fake ...
Wednesday, 12 June 2013

Malware sites to block 12/6/13

›
This is a refresh of this list of domains and IPs controlled by what I call the " Amerika " gang, and it follows on from this B...
1 comment:
Thursday, 6 June 2013

NatPay "Transmission Confirmation" spam / usforclosedhomes.net

›
This fake NatPay spam leads to malware on usforclosedhomes.net . Version 1: Date:      Thu, 6 Jun 2013 20:53:08 +0600 [10:53:08 EDT] ...
6 comments: