Dynamoo's Blog

This spam mis-spells "invoice" in the subject line, and has an .arj file attached that contains a malicious binary. Example su...

This fake ACH (or is it Paychex?) email has a malicious attachment: Date:      Tue, 5 Nov 2013 08:28:30 -0500 [08:28:30 EST] From:     ...

This spam has a malicious attachment: Date:      Mon, 29 Jul 2013 06:08:44 -0800 [10:08:44 EDT] From:      "Marcia_Manning@key.com...

This fake Bank of America spam has a malicious attachment: Date:      Fri, 26 Jul 2013 15:50:32 +0200 [09:50:32 EDT] From:      impa...

188.241.86.33 (Megahost, Romania) is a malware server currently involved in injection attacks, serving up the Blackhole exploit kit, Zbot...

This spam has an encrypted ZIP file attached that contains malware. The passwords and filenames will vary. From: Fiserv Secure Notific...

These domains and IPs seem to be active as Zbot C&C servers. The obsolete .su (Soviet Union) domain is usually a tell-tale sign of.. ...

These domains and IPs are currently acting as C&C and distribution servers for Zbot. I would advise blocking these IPs and domains if ...

There's something evil on 82.165.38.206 (1&1, Germany).. Zbot, basically. The WHOIS details are refreshingly honest about the inte...

In addition to these and these. yht30.net.pl yht36.com.pl yht37.com.pl yht38.com.pl yht39.net.pl yht3e.net.pl yht3q.net.pl yht3r.pl yht3t.p...

More domains relating to this Zbot attack : ui7772.co.kr ui7772.kr ui7772.ne.kr ui7772.or.kr ui7772co.kr ui777f.kr ui777f.ne.kr ui777f.or.kr...

There are getting spammed out at the moment: From: automailer@blahblah.blah [mailto:automailer@blahblah.blah] Sent: 13 January 2010 11:08...

Another version of the Zbot trojan coming in via email, much like this one. From: operator@blah.blah Sent: 20 November 2009 15:21 To: Blah...

This is the Zbot trojan or something, very much like this one . From: Electronic Payments Association [mailto:support@nacha.org] Sent: ...

Piradius.net appears to be up to its dark grey hat antics again with a server at 124.217.251.179 which is providing services to ...