Dynamoo's Blog

I've know that the RU:8080 gang appears to have been back for a while, but I haven't had a lot of samples.. here's a new one ...

This fake ADP spam leads to malware on abrakandabr.ru : From:     ClientService@adp.com [ClientService@adp.com] Date:     22 October 20...

These IPs and domains are associated with this spam run . Some of these servers have been compromised for some time by the looks of things...

Two days ago I wrote about the apparent return of the RU:8080 .. well it appears that in order to celebrate their return, they've ackn...

This fake Pinterest spam leads to a malicious download on alenikaofsa.ru : Date:      Wed, 16 Oct 2013 12:03:11 -0300 [11:03:11 EDT] F...

A quick bit of research for anyone following the RU:8080 gang.. where has the spam gone? Recently we've seen RU:8080 spam every wee...

After a few quiet days on the RU:8080 spam front it has started again.. Date:      Wed, 17 Apr 2013 20:18:14 +0800 From:      "Bet...

This fake UPS spam leads to malware on juliamanako.ru : Date:      Thu, 11 Apr 2013 11:58:33 -0300 [10:58:33 EDT] From:      Aida Tacke...

This spam leads to malware on juliaroberzs.ru : Date:      Thu, 11 Apr 2013 02:46:13 +0100 From:      Mayola Phipps via LinkedIn [membe...

This fake Verizon Wireless spam leads to malware on jamtientop.ru : Date:      Wed, 10 Apr 2013 01:14:51 +0100 [04/09/13 20:14:51 EDT] ...

This fake BBB spam leads to malware on jamiliean.ru : From: Habbo Hotel [mailto:auto-contact@habbo.com] Sent: 10 April 2013 00:17 Sub...

I haven't seen this one before. It leads to malware on judianko.ru : From: messages-noreply@bounce.linkedin.com [mailto:messages-no...

This fake Intuit spam leads to malware on juhajuhaa.ru : Date:      Tue, 9 Apr 2013 11:21:18 -0430 [11:51:18 EDT] From:      Tagged [Ta...

This fake LinkedIn spam leads to malware on jonahgkio.ru: Date:      Tue, 9 Apr 2013 10:03:31 -0300 From:      "service@paypal.com...

This fake printer spam leads to malware on jundaio.ru : Date:      Tue, 9 Apr 2013 10:07:40 +0500 [01:07:40 EDT] From:      Scot Crump ...

It didn't take long for the Margaret Thatcher themed malware to start after her death . This one leads to malware on ighjaooru.ru : ...

I've never heard of M&I Bank but this is quite an old school spam campaign that leads to malware on ighjaooru.ru : Date:      ...

This spam leads to malware on ifikangloo.ru : From: KaelSaine@mail.com [mailto:KaelSaine@mail.com] Sent: 05 April 2013 11:43 Subject:...

This fake invoice spam leads to malware on ijsiokolo.ru : Date:      Fri, 5 Apr 2013 07:57:37 +0300 From:      "Account Services up...

This fake legal spam leads to malware on itriopea.ru : Date:      Thu, 4 Apr 2013 07:44:02 -0500 From:      Malaki Brown via LinkedIn [...