Dynamoo's Blog

These domains are associated with the Win32/FakeRean "Fake anti-virus" trojan, and are worth blocking. Domain IP ...

The spammers seem to be busy today, using an old trick of embedded a spam in a template lifted from a legitimate business. This particular o...

To prove that the Bad Guys have a sense of humour at least, this fake email claims to be a renewal subscription for Webroot: From: Best...

A variant on this malware-laden email , this particular approach pretends to be from Joomla and even goes as far as to fake some of the he...

A fairly crude attempt to get clickthroughs to a virus infected site: From: ImageShack Registration <noreply@yfrog.com> Date: 23 J...

AS49544 is a network with IP addresses ranging from 195.78.108.1 - 195.78.109.255 which claims to be in the Netherlands, but may actually ...

Nokia.com appears to have been compromised through a third-party script: europe.nokia.com (e.g. hxxp:||europe.nokia.com/support/download-...

The wording may vary, but this is a PDF exploit currently doing the rounds pretending to be from Royal Mail. Sophos, F-Secure and Avast dete...

ebuddy.com is running a malicious ad on the zoombanner.com domain, apparently managed by Yieldmanager. First, the "legitimate"...

The malicious ads were running through (and I understand now terminated by) bootcampmedia.com, related to this post , according to commenter...

In addition to these and these. yht30.net.pl yht36.com.pl yht37.com.pl yht38.com.pl yht39.net.pl yht3e.net.pl yht3q.net.pl yht3r.pl yht3t.p...

There are getting spammed out at the moment: From: automailer@blahblah.blah [mailto:automailer@blahblah.blah] Sent: 13 January 2010 11:08...

Another day, another badly detected trojan: Subject: Congratulations From: "Media Service" Congratulations!! You have ...

This trojan claims to be something to do with a Facebook password reset, but it's a plain old EXE-in-ZIP trojan attack. Subject: ...

adbnr.ru seems to be the latest domain to be used by the bad guys in this current round of injection attacks. The injected code to look fo...

This email looks like it's from Microsoft, but it is really intended to load a trojan onto your PC: From: Microsoft Customer Support [ma...

Another EXE-in-ZIP trojan, this time disguised as an Excel spreadsheet. The pitch is: Subject: Western Union Transfer MTCN: 2474153...

songmeanings.net is a popular and relatively crud-free lyrics site that attracts millions of visitors a year. Alexa ranks it as about the 5...