Dynamoo's Blog

This fake Dropbox spam leads to malware: Date:      Fri, 4 Oct 2013 16:24:30 +0330 [08:54:30 EDT] From:      Dropbox [no-reply@dropboxm...

This fake Chase spam has a malicious attachment: Date:      Thu, 22 Aug 2013 10:00:33 -0600 [12:00:33 EDT] From:      Jed_Gregory [Jed_...

This fake Facebook spam leads to malware on thenatemiller.co : Date:      Wed, 21 Aug 2013 22:05:38 +0530 [12:35:38 EDT] From:      Fa...

This fake Facebook spam leads to malware on dennissellsgateway.com : Date:      Tue, 20 Aug 2013 15:28:11 -0500 [16:28:11 EDT] From:  ...

This fake Facebook spam leads to malware on hubbywifewines.com : Date:      Mon, 19 Aug 2013 16:20:06 +0200 [10:20:06 EDT] From:      F...

This fake Wells Fargo email has a malicious attachment: Date:      Fri, 16 Aug 2013 09:51:17 -0500 [10:51:17 EDT] From:      Wells Farg...

This fake MoneyGram spam leads to malware on drstephenlwolman.com : Date:      Fri, 2 Aug 2013 22:23:53 +0330 [14:53:53 EDT] From:     ...

This fake printer spam has a malicious attachment: Date:      Mon, 8 Jul 2013 12:20:24 -0500 [07/08/13 13:20:24 EDT] From:      HP Dig...

This spam is leading to malware on 13.carnovirious.net , a domain spotted earlier today .. but one that has switched server to 74.91.117.4...

OK, I can see just two malicious domains on 74.91.117.50 but they are currently spreading an exploit kit through this spam run . The d...

This bunch of IPs and domains are being used in a series of fairly well-targeted attacks involving malicious spam messages that look like ...

This fake LinkedIn spam leads to malware on cowonhorse.co : From: LinkedIn.Invitations [mailto:4843D050@pes.sau48.org] Sent: Fri 19/10/...

This fake LinkedIn spam leads to malware on 74.91.112.86 : From: LinkedIn.Invitations [mailto:1F31A2F6B@delraybeachhomesales.com] Sent:...

This fake LinkedIn spam appears to lead to a malicious payload on 74.91.112.248: Date :      Wed, 13 Jun 2012 14:58:15 +0200 From :      ...

This fake LinkedIn spam leads to malware on 74.91.120.210: Date :      Mon, 30 Apr 2012 17:51:37 +0530 From :      "LinkedIn reminde...

Another malware campaign using the goo.gl redirector leading to a malicious payload, this time on 66.151.138.87 . From :     OP 25939760 Y...

A bit of a shift in spammer tactics here: From:     Mohit Girsh girshmohit1988@yahoo.com Date:     12 March 2012 11:54 Dubject:     Elec...

Two different spams with the same payload, the first featuring a massive failure of competency: Date :      Thu, 1 Mar 2012 18:34:39 ...

Yet more NACHA spam leading to a malicious payload, this time on cooldcloud.com . Date:      Mon, 12 Feb 2012 08:16:16 -1100 From:   ...

More NACHA spam with a malicious payload.. Date :      Thu, 1 Feb 2012 13:05:58 +0100 From :      risk@nacha.org Subject :      Rejec...