Showing posts with label Moldova. Show all posts
Showing posts with label Moldova. Show all posts
Monday, 29 June 2015

Malware spam: "Payslip for period end date 29/06/2015" / "noreply@fermanagh.gov.uk"

›
This fake financial spam comes with a malicious payload: From :    noreply@fermanagh.gov.uk [ noreply@fermanagh.gov.uk ] Date :    29 J...
Wednesday, 6 May 2015

Malware spam: "Email from Transport for London" / "noresponse@cclondon.com"

›
This spam does not come from Transport for London, but is instead a simple forgery with a malicious attachment. From :    noresponse@cc...
Friday, 24 April 2015

Malware spam: "Colin Fox [colin@nofss.co.uk]" / "Invoice 519658"

›
This spam is not from Norwich Office Supplies but is instead a simple forgery. They have not been hacked (even if their website says they...
2 comments:
Tuesday, 21 April 2015

Malware spam: "LAG invoice I413136" / "Lichelle Ebner [mailto:Lichelle5938@lagrinding.co.uk]"

›
This spam email does not come from LA Grinding but is instead a simple forgery with a malicious attachment. From : Lichelle Ebner [mail...
2 comments:
Monday, 20 April 2015

Malware spam: "Hector Malvido [handyman1181@hotmail.com]" / "Pending payment"

›
This spam comes with a malicious attachment: From :    Hector Malvido [handyman1181@hotmail.com] Date :    20 April 2015 at 10:51 Sub...
1 comment:
Wednesday, 15 April 2015

Malware spam: "Invoice from Living Water" / "Natalie [mailto:accounts@living-water.co.uk]"

›
This fake invoice does not come from Living Water , but instead is a simple forgery with a malicious attachment. From : Natalie [mailto:...
Tuesday, 14 April 2015

Malware spam: "Kairen Varker [mailto:kvarker@notifications.kashflow.com]" / "Invoice from"

›
This fake invoice has a malicious attachment: From : Kairen Varker [mailto:kvarker@notifications.kashflow.com] On Behalf Of Kairen Varke...
Thursday, 26 February 2015

Malware spam: "Chris Christou [chris.christou@greysimmonds.co.uk]" / "Copy invoices"

›
This fake invoice spam comes with a malicious attachment: From :    Chris Christou [chris.christou@greysimmonds.co.uk] Date :    26 Feb...
Wednesday, 25 February 2015

Malware spam: "Your LogMeIn Pro payment has been processed!"

›
This fake financial email does not come from LogMeIn, instead it has a malicious attachment: From:    LogMeIn.com [no_reply@logmein.com...
Tuesday, 24 February 2015

Malware spam: "Berendsen UK Ltd Invoice 60020918 117" / "donotreply@berendsen.co.uk"

›
This fake invoice is not from Berendsen UK Ltd but is a simple forgery. They are not sending out the spam and their systems have not been...
2 comments:
Monday, 16 February 2015

Malware spam: "T.A.G. (The Automotive Group) Ltd." / "Lawrence Fisher [l.fisher@taghire.co.uk]" / invoice

›
This fake invoice does not come from The Automotive Group Ltd or any similarly-named company. Their systems have not been compromised in a...
Sunday, 28 September 2014

Evil network: Shellshock and MangoHost (mangohost.net) / 83.166.234.0/24

›
I came across this particular sewer while looking in my logs for Shellshock access attempts yesterday. I noticed that some cheeky b--stard...
Wednesday, 8 May 2013

Amazon.com spam / ehrap.net

›
This fake Amazon spam leads to malware on ehrap.net : Date:      Tue, 7 May 2013 22:54:26 +0100 [05/07/13 17:54:26 EDT] From:      ...
Wednesday, 5 December 2012

Zbot sites to block 5/12/12

›
These domains and IPs are involved in malware distribution, especially the Zbot trojan. Most are using the nameservers in the dnsnum10.com...
Monday, 13 August 2012

Even more malware sites to block on 194.28.115.150

›
More evil sites to block on 194.28.115.150 ( Specialist ISP ) following on from these : idi42nga.rr.nu kprud89entia.rr.nu hin66gof.rr.nu...
Friday, 10 August 2012

Yet more malware sites to block on 194.28.115.150

›
Another batch of malware sites to block on 194.28.115.150 following on from these .. although to be franking, blocking access to 91.211.200....
Wednesday, 8 August 2012

More malware sites to block on 194.28.115.150

›
Yet more malware sites hosted on the same IP of 194.28.115.150 address from black hat host Specialist ISP in Transnistria, in addition to t...
Tuesday, 7 August 2012

Malware sites to block on 194.28.115.150

›
This is an updated list of evil domains on 194.28.115.150 ( Specialist ISP in Transnistria). Blocking all of 194.28.112.0 - 194.28.115.255 ...
Wednesday, 1 August 2012

xinthesidersdown.com injection attack in progress

›
There is currently an injection attack using a script pointing to [donotclick] xinthesidersdown.com/sl.php  doing the rounds. The malicious...
10 comments:
Tuesday, 31 July 2012

Something evil on 194.28.115.150 and lasimp04risoned.rr.nu

›
The following domains appear to be part of an ongoing injection attack (using lasimp04risoned.rr.nu at present). They are hosted by black-ha...
1 comment: