Dynamoo's Blog

liveadexchanger.com is an advertising network with a questionable reputation currently hosted on a Google IP of 146.148.46.20 . The WHOIS ...

This is some sort of malware using insecure OpenX ad servers to spread. Oh wait, insecure is pretty much the default configuration for Ope...

This is one of those ephemeral traces of malware you sometimes see, like a will-o'-the-wisp . Something seems to be there, but on clos...

69.64.39.166 (Hosting Solutions International, US) appears to be hosting an exploit kit (possibly Fiesta ) according to URLquery reports ...

Over the past few days I have seen several cases where legitimate websites have had .js files interfered with in order to serve up somethi...

Popular Italian weather site ilmeteo.it appears to have been compromised this morning, with several legitimate .js files on the site alte...

173.246.102.246 (Gandi, US) looks like it is being used for exploit kits being promoted either through malvertising or through exploited ...

There's something evil on 96.44.139.218 (OC3 Networks, US): perclickbank.org google-analitlcs.com google-statistic.com nailart4desi...

The IP address 199.71.233.226 (Netrouting, US)  and the range 66.45.251.224/29 (Interserver, US) are currently being used to distribute ...

The weather site wetter.com is the 25th most popular site in Germany (and nukber 602 in the world) according to Alexa . Right at the mome...

This fake wire transfer spam leads to malware on porschedesignrussia.ru: Date :      Fri, 20 Jul 2012 04:10:52 +0100 Subject :      RE...

MAXHOSTING are a fairly prolific evil network that I profiled last month , so it isn't a huge surprise to see that the evilness continu...

If you work in IT Security then malicious ads are a regular pain in the backside.. and you probably wonder why "reputable" ad netw...

Sandi at Spyware Sucks reports that the popular(ish) Facebook game of FarmTown (not FarmVille) has be compromised, possibly through a malic...

The German news site Handelsblatt was recently the victim of a malvertising campaign : 02.02.2010 Handelsblatt malware on Web site Update: I...

We've seen a number of ads being punted through AdSlash.com to legitimate ad networks, but it appears that these are leading to a PDF E...

ebuddy.com is running a malicious ad on the zoombanner.com domain, apparently managed by Yieldmanager. First, the "legitimate"...

The malicious ads were running through (and I understand now terminated by) bootcampmedia.com, related to this post , according to commenter...

Sandi at Spyware Sucks has a closer look at the malvertisements running through Bootcampmedia.com and comes up with some more details, fol...

A malicious ad running on BoingBoing.net is delivering visitors to a PDF exploit. Given the complicated state of advertising arbitrage,...