Dynamoo's Blog

There has been a shift overnight in the domains used in the Asprox SQL injection attack, the ones to look for are: 47mode.name berjke.ru 81d...

Microsoft Security Bulletin MS08-067 – Critical: Vulnerability in Server Service Could Allow Remote Code Execution (958644) Let's make i...

This is a fake email message pretending to be from WorldPay relating to a payment to "Academic Resources Center Inc". There's ...

We have seen quite a lot of variants of this particular trojan recently, mostly aimed at banks. This one passes itself off as a some sort of...

I've just spent several days investigating a machine with a particularly nasty rootkit infection. Despite throwing several tools at it a...

Another EXE-in-ZIP-disguised-as-a-DOC trojan, similar to this one . Subject: Data request From: "Billy Roark" Please f...

This fake email contains an EXE in a ZIP designed to look like a Word document (complete with authentic looking icon), in this case "St...

There are plenty of legitimate companies called "LV Electronics", but this job offer is not from one of them. In this case, the or...

One of a series of fake job offers that are doing the rounds, this time promoting a company called IAG ("Internet Auction Service"...

Another Asprox SQL injection domain to block / check for is lang42.ru . The following domains have been active in the past 24 hours: 53refer...

After being stable for some time, the Asprox SQL injection hacks are now redirecting through a new bunch of .ru domains. 30area.ru 4log-in.r...

I've had a few CA-Vet alerts for Win32/Puloagem.B recently, with pretty sparse information on what Puloagem actually is. If you're b...

Another bogus employment offer, this time from "Habitats Property and Service Inc", but there appears to be no such firm.. althoug...

A timely warning from the FTC on the threat of criminals using the worldwide financial crisis to obtain banking details.. although as seen ...

A malicious EXE file is doing the rounds, pretending to be an update from Microsoft and including some social engineering such as a fake PGP...

These fake "security certificates" have been around for a while, but it has taken a little time for the Bad Guys to leverage the r...

VM-SOFT ( www.vm-soft.com.ua ) is a wholly legitimate Ukranian software developer, whose corporate identity is being used by a third party...

I have covered this particular group of dating scam sites before , but this time there's a slight shift in the way that it works. In thi...

The Asprox botnet is still active but has been remarkable stable with no new domains in the past week, and 88% of the traffic going to deryv...

There are plenty of rumours that Nokia will announce their "first" touchscreen phone sometime this week.. except that it won't...