Showing posts with label Serverius. Show all posts
Showing posts with label Serverius. Show all posts
Thursday 18 February 2016

Malware spam: Copy of Invoice 20161802-12345678 leads to Locky ransomware

›
This fake financial spam spoofs different senders and different companies, with a different reference number in each. From :    Devon V...
Wednesday 16 December 2015

Malware spam: "Your account has a debt and is past due" leads to Teslacrypt

›
This fake financial spam comes with an interesting error in the part that is meant to randomly-generate the dollar amount: From :    Fra...
Tuesday 15 December 2015

Malware spam: "Reference Number #89044096, Notice of Unpaid Invoice" leads to Teslacrypt

›
This fake financial spam comes with a malicious attachment. From :    Carol Mcgowan Date :    15 December 2015 at 09:09 Subject :    ...
Monday 28 January 2013

Zbot sites to block 28/1/13

›
These domains and IPs are currently acting as C&C and distribution servers for Zbot. I would advise blocking these IPs and domains if ...
1 comment:
Sunday 23 December 2012

"SecureMessage" spam / infiesdirekt.asia, pacesetting.asia and siteswillsrockf.net

›
Another fake "SecureMessage" spam leading to malware, the same in principle to this spam run and again hosted on the same Serve...
Saturday 22 December 2012

"New message received" spam / siteswillsrockf.com and undering.asia

›
This malicious spam run is part of this large cluster of malicious sites that I wrote about yesterday. Date:      Sat, 22 Dec 2012 16:...
Friday 21 December 2012

Malware sites to block 21/12/12

›
There are a series of malware domains on 91.201.215.173 apparently using a Java and PDF exploit to infect visitors. The infection machani...
Thursday 20 December 2012

"New message" spam, fake dating sites and libertymonings.info

›
This "New message" themed spam leads to both a fake anti-virus page and a Java exploit on the domains site-dating2012.asia and ...
Wednesday 19 December 2012

Facebook spam / 46.249.58.211 and 84.200.77.218

›
There are various Facebook spams doing the rounds pointing to a variety of malware sites on 46.249.58.211 and 84.200.77.218 , for example...
Tuesday 20 November 2012

Malware sites to block 20/11/12

›
This summary is not available. Please click here to view the post.
Wednesday 18 January 2012

Something evil on 95.211.115.228 and 46.249.37.22.

›
A set of malicious sites, linked to the Redret gang, hosted on 95.211.115.228 (Leaseweb, Netherlands). Blocking the IP rather than the ind...
Tuesday 17 January 2012

Redret domains to block 17/1/12

›
The Redret domains have shifted around a little since last week , indicating perhaps more malicious activity to come. Of note, cvredret...