Dynamoo's Blog

This is a refresh of this list of domains and IPs controlled by what I call the " Amerika " gang, and it follows on from this B...

The malicious spam pushers are trying very hard today to drive traffic to their malware site on mskoblastionline.ru with a variety of fam...

This fake flight email leads to malware on saprolaunimaxim.ru . From : Simonne Storey [sandy@krishermckay.com] Subject : Your Flight O...

These two fake "wire transfer spams" lead to malware on pistolitnameste.ru From : "AUSTIN MCDOWELL" [AUSTINMCDOWELL...

This fake HP OfficeJet spam leads to malware on uzindexation.ru: From : Ashley Madison [mailto:donotreply@ashleymadison.com] Sent : 05...

This fake LinkedIn spam leads to malware: Date :      Fri, 1 Jun 2012 02:45:50 +0000 From :      LinkedIn Email Confirmation [emailcon...

Currently there is an email attack running similar to this one earlier today , but in this case the malware is on 50.56.208.113:8080/showthr...

Here's a "flight ticket" spam leading to malware: Date :      Tue, 20 Mar 2012 11:56:41 +0900 From :      "DEDE Rai...

This fake traffic ticket (allegedly sent by UPS!) leads to malware at dkjhfkjsjadsjjfj.ru:8080/images/aublbzdni.php Date :      Fri, ...

Another malicious spam campaign, this time with an attachment leading to a malware payload at dsakhfgkallsjfd.ru:8080/images/aublbzdni.php...

Another malicious spam, this time with an attachment containing obfuscated code leading to caskjfhlkaspsfg.ru . Date :      Thu, 1 Mar ...

This spam comes with a malicious attachment pointing to a page on cparabnormapoopdsf.ru . Date :      Tue, 27 Feb 2012 03:53:09 +0530 ...

A terse version of the familiar NACHA fake spam, leading to malware: Date :      Mon, 26 Feb 2012 12:16:40 +0530 From :      accountin...

This isn't from a HP OfficeJet, the attachment leads to malware.. Date :      Thu, 22 Feb 2012 05:04:38 +0700 From :      scanner@...

Another spam run (will they ever end?) this time with a malicious .htm attachment that tries to download from cpojkjfhotzpod.ru . Here are...

Another spam run with a malicious attachment: Date :      Fri, 16 Feb 2012 11:24:56 +0700 From :      "VICTOR TALLEY" Subje...