Dynamoo's Blog
Malware, spam, scams and random stuff, by Conrad Longmore.
Friday, 30 July 2010
Evil network: Microlines (microlines.lv), AS2588 (79.135.128.0/19)
›
Latvia seems to be getting a bad reputation for supporting criminal activity. The latest accomplice is Microlines (microlines.lv) who mix ...
"Toyton Ltd" / todayisp.com / dboxs.org scam
›
We've seen this scam before , an alleged Chinese registrar claims that someone is buying a domain name similar to the one that you want ...
Thursday, 29 July 2010
freead.name / mybar.us / toolbarcom.org / adsnet.biz
›
A slightly novel attack, found injected into a Javascript library and using freshly-registered domains. The attack uses obfuscated Javascrip...
5 comments:
Phishing domains on M247 Ltd
›
I've never heard of M247 Ltd before today until their network came up as providing infrastructure for this scam . A few IPs over from th...
"eurjobs.org" fake job offer
›
There are a lot of these going on at the moment, this is another fake job offer trying to rope unsuspecting applicants into doing something ...
Wednesday, 28 July 2010
"west-epec.com" fake job offer
›
This is some sort of money laundering or parcel reshipping scam. The domains west-epec.com was registered just yesterday but it appears not ...
LAPO LOAN COMPANY LIMITED
›
Scams evolve in much the same way as plant or animal life. Unsuccessful scams become extinct, very successful ones tend to explode in number...
Tuesday, 27 July 2010
Evil network: Najada Ltd, AS49544 (91.216.122.0/24)
›
This story from Brian Krebs caught my eye, a quick bit of background digging on check-crypt.com revealed a whole new Evil Network in Moldov...
"Paul Badji: Treat As Urgent" email
›
Paul Badji is a real diplomat at the UN , this email is NOT from Paul Badji . The UN's name has been used this way before, notably wit...
Monday, 26 July 2010
Sophos has a fix for .LNK flaw
›
Install this, if you don't know why you should, then watch this video first.. then install it.
Welcome to "Joomla!" email links to malware
›
A variant on this malware-laden email , this particular approach pretends to be from Joomla and even goes as far as to fake some of the he...
Friday, 23 July 2010
"Thank you for registering with ImageShack." mail leads to virus
›
A fairly crude attempt to get clickthroughs to a virus infected site: From: ImageShack Registration <noreply@yfrog.com> Date: 23 J...
Romance Scams
›
A couple of interesting news stories recently illustrate the dangers of "Romance Scams" or Dating Scams which illustrate the dang...
"TOYOTA CAR LOTTERY" scam
›
A ridiculously long and horribly written scam email about winning a Toyota, email relayed through 60.251.190.235 in Taiwan, but apparently s...
Thursday, 22 July 2010
amanda.lee@blackberry.co.za is not offering a free BlackBerry
›
A variation on this hoax email analysed at Hoax-Slayer indicates that someone has a grudge against Research in Motion (who make the BlackB...
Wednesday, 21 July 2010
Hotbar.com deceptive installation.. again.
›
Hotbar.com probably needs no introduction as an unpleasant piece of Slimeware , picked up from the ruins of Zango by a Washington State co...
Saturday, 17 July 2010
"Pollux Enterprise Ltd" money mule scam
›
Pollux Enterprise Ltd appears to be a genuine company in Hong Kong. This email claims to be from Pollux Enterprise Ltd, but isn't.. it...
2 comments:
‹
›
Home
View web version