Dynamoo's Blog

Atrivo, Inc (also known as Intercage) and their main customer, Esthost (related to Estdomains) might well be a familiar name to people worki...

I've seen some daft excesses in local politics in my time, but over Sheboygan, Wisconsin, things have taken a new twist... with a lawsui...

The bad guys are busy today, here's another fake bank "upgrade" leading to malware, following on from this one . Subject: ...

This isn't really about tilde.exe at all, but a file called C:\Windows\System32\~.exe that has a habit of showing up on laptops that h...

Emergency alert system? Nope, malware download more likely. Subject: Colonial Bank Emergency Alert System. From: "Colonial ...

There's been a slight shift in the characteristics of the current Asprox attack. The javascript called is now script.js rather than ngg...

The domains used is the Asprox SQL injection attack have been stable for most of the past week, but over the last 24 hours some ne wdomains ...

I mentioned some days ago that there seems to be a parallel SQL injection attack to Asprox with all the hallmarks of being Chinese. Over the...

Just a single new Asprox domain to list this morning: ujnc.ru which is still using the js.js redirector, i.e. www.ujnc.ru/js.js . All the d...

Some more Asprox domains to block or look for in your logs: 3njx.ru cb3f.ru cnld.ru nbh3.ru okcd.ru

After a quiet few days, Asprox seems to have flared up again (at about 1000 CET) with a new set of malware domains, still launching from a ...

For the moment the Asprox SQL injection attacks seem to have stopped, although infected sites are still infected and need to be secured as s...

Another case where a spammer is too stupid to use the spamming tool they have just bought. Subject: hey From: "hvgoxscw...

Looks like another variant of the Storm Worm /Zapchast doing the rounds: Subject: Hey, take a look!! From: "Yahoo Daily ...

The Internet Storm Center has published technical details on the Chinese-based SQL injection attack which may be of interest to SQL adminis...

A shift in behaviour from the Asprox botnet - this time all traffic from infected sites is being redirected through a fixed IP at 91.203.93....

Current Asprox domains to look for in your blogs or block. These have all been active for 3 or 4 days now, which is an unusually long time f...

These are the currently active Asprox domains to check for. They are all very recently registrations. 8hcs.ru 98hs.ru bgsr.ru bywd.ru ibse.r...

Money mule scams are now very common - basically some poor fool ends up laundering money or reshipping goods following the instructions of ...

Loan scams are a another variant of the advanced fee fraud scam (e.g. fake lotteries, dead dictator's fortunes etc). These seem to be m...