Showing posts with label Sweden. Show all posts
Showing posts with label Sweden. Show all posts
Thursday, 27 April 2017

Malware spam: Scotiabank / "Secure email communication" / Secure.Mail@scotiabankmail.com

›
This fake financial spam leads to malware: From :    ScotiaBank [Secure.Mail@scotiabankmail.com] Date :    27 April 2017 at 14:13 Subje...
Tuesday, 12 July 2016

Malware spam: "Here's that excel file (latest invoices) that you wanted." leads to Locky

›
This fake financial spam leads to Locky ransomware: From :    Benita Clayton Date :    12 July 2016 at 15:04 Subject :    Fw: hi [redac...
Tuesday, 8 March 2016

Malware spam: "Compensation - Reference Number #368380" leads to Locky

›
This fake financial spam comes with a malicious attachment: From:    Orval Burgess Date :    8 March 2016 at 11:10 Subject :    Compe...
Tuesday, 7 April 2015

Malware spam: "EBOLA INFORMATION" / "noreply@ggc-ooh.net"

›
This fake medical email contains a malicious attachment. It's a novel approach by the bad guys, but I doubt that many people will find...
Thursday, 2 April 2015

Malware spam: "Copy invoices Snap on Tools Ltd" / "Allen, Claire [Claire.Allen@snapon.com]"

›
This fake invoice does not come from Snap On Tools, but is instead a simple forgery. From :    Allen, Claire [Claire.Allen@snapon.com] ...
Wednesday, 1 April 2015

Malware spam: "Your Remittance Advice COMPANY NAME"

›
Yet another malware spam run today, this time from randomly-named but legitimate companies, for example: From:    Kate Coffey Date:   ...
Friday, 21 February 2014

Something evil on 74.50.122.8, 5.61.36.231 and 94.185.85.131

›
Thanks to @Techhelplistcom for the heads up on this little mystery.. It all starts with a spam evil (described here ).. The link...
1 comment:
Tuesday, 24 September 2013

Malware sites to block 24/9/2013

›
The malicious IPs and domains on this list are operated by this gang , and it replaces the list last week . 5.135.42.104 (OVH, Netherlan...
Tuesday, 17 September 2013

Malware sites to block 17/9/13

›
This set of malicious IPs and domains is associate with this gang , and the list replaces the last one published here . 24.173.170.230 (...
Tuesday, 30 July 2013

Malware sites to block 30/7/13

›
These sites and IPs are associated with this gang , and are either currently in use or they have been in use recently. The list has indivi...
Wednesday, 12 June 2013

Malware sites to block 12/6/13

›
This is a refresh of this list of domains and IPs controlled by what I call the " Amerika " gang, and it follows on from this B...
1 comment:
Friday, 7 June 2013

BBB spam / pnpnews.net

›
This fake BBB spam leads to malware on pnpnews.net : From: Better Business Bureau [mailto:standoffzwk68@clients.bbb.com] Sent: 07 June...
Monday, 29 April 2013

"Requested Reset of Yoyr PayPal Password" spam / frustrationpostcards.biz

›
This fake PayPal spam leads to malware on frustrationpostcards.biz :  Date:      Mon, 29 Apr 2013 13:22:03 -0500 From:      "servi...
1 comment:
Wednesday, 24 April 2013

"New Secure Message" spam / pricesgettos.info

›
This spam leads to malware on pricesgettos.info : Date:      Wed, 24 Apr 2013 16:41:50 +0100 [11:41:50 EDT] From:      Cooper.Anderson@...
Friday, 26 October 2012

ADP Spam / steamedboasting.info

›
This fake ADP spam leads to malware on steamedboasting.info : From: ClientService@adp.com [mailto:ClientService@adp.com] Sent: 26 Octo...
Monday, 1 October 2012

Intuit Shipment spam / art-london.net

›
This terminally confused Intuit / USPS / Amazon-style spam leads to malware at art-london.net : Date:      Mon, 1 Oct 2012 21:31:57 +0...
Tuesday, 12 June 2012

partyysoon.info injection attack in progress

›
I haven't had much time to analyse this yet, but there seems to be some sort of injection attack using the domain partyysoon.info . It m...