Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Monday, 29 September 2008

Nokia's first touchscreen phone....?

›
There are plenty of rumours that Nokia will announce their "first" touchscreen phone sometime this week.. except that it won't...

Asprox: ctiry.ru, deryv.ru, mentoe.ru, mheop.ru, pormce.ru and xenbv.ru

›
Another bunch of Asprox domains that have been active over the past few days are listed below. As usual, block these or check your logs for ...
Thursday, 25 September 2008

Asprox: "eval(function(p,a,c,k,e,r)"

›
There has been a slight shift in tactics by the Asprox gang in their SQL Injection Attacks in that they are now using a packer on their java...
Wednesday, 24 September 2008

Asprox: h3x.info

›
Briefly popping up on the Asprox SQL Injection radar yesterday was h3x.info, specifically a call to h3x.info/index.php [dangerous site, do...
Tuesday, 23 September 2008

T-Mobile G1

›
It's kind of hard to tell if the T-Mobile G1 is the next big thing or just some sort of damp squib. It may not look as impressive as th...
Thursday, 18 September 2008

Asprox: mnbenio.ru

›
mnbenio.ru is a new Asprox SQL injection domain that has been active in the past 24 hours, the following four domains are the most active: ...
Wednesday, 17 September 2008

Asprox: mnicbre.ru, pkseio.ru and vtg43.ru

›
The domains used in the Asprox SQL Injection attacks have been stable for a few days now, but yesterday some new .ru domains appeared: mnicb...
Saturday, 13 September 2008

Doug Stanhope

›
I first stumbled across US stand-up comic Doug Stanhope [link probably NSFW ] some years ago and was in equal parts horrified and amused by...
Thursday, 11 September 2008

Dating scams

›
Dating scams are usually a variant of the advanced fee fraud - some pretty girl (probably some ugly bloke in reality) sends you some random...
3 comments:

Asprox: 22net.ru, 4net9.ru, 64asp.ru, 92prt.ru and fst9.ru

›
These are the domains active in the Asprox SQL Injection attack in the past 24 hours, new ones are in bold. Block these and/or check your lo...
Wednesday, 10 September 2008

SpamCop phish

›
Some people will phish for anything - in this case they are trying to get access to SpamCop accounts . Go figure. Reply to address is 2020sa...

PestPatrol: SillyDl FFL in wuauclt.exe

›
It looks like CA PestPatrol might have a false positive, detecting SillyDl FFL in C:\windows\system32\wuauclt.exe . This is a component of ...
6 comments:

Asprox: net83.ru, acr34.ru, asl39.ru and net83.ru

›
Another bunch of very fresh Asprox domains being used in the Asprox SQL Injection attack, registered at Naunet to email address retyi111@yah...
Tuesday, 9 September 2008

SQL Injection: ave2.cn / %61%76%65%32%2E%63%6E

›
This SQL Injection attack seems to be aimed at Chinese language sites. The code injected points to http://%61%76%65%32%2E%63%6E which is tr...
Monday, 8 September 2008

Asprox: 64do.com

›
Possibly the final Asprox domain on the day in 64do.com - add this to your block or scan list.

Asprox: "aspx" domains

›
Keep an eye out for these following Asprox domains, all recently registered to the email address druid00091@aol.com. Block them or scan your...

Asprox: 19ssl.net

›
Another "druid00091@aol.com" domain (following on from this one and this one ) , this type 19ssl.net, which is being actively use...

Asprox: 24aspx.com

›
The latest domain name used in the recent Asprox SQL Injection attacks appears to be 24aspx.com. Perhaps the Asprox guys are boasting a lit...
1 comment:

"Job Opportunity at Luksus" / luksus-jobs.org scam

›
Luksus Media is a wholly legitimate Finnish company, but this attempt to recruit a money mule does not come from Luksus, just from a compa...
Thursday, 4 September 2008

CNOOC (www.cnooc.com.cn) scam

›
CNOOC (www.cnooc.com.cn) are a legitimate oil exploration and petrochemicals firm in China. The following job offer is a money mule scam , ...
‹
›
Home
View web version
Powered by Blogger.