Wednesday, 25 August 2010

Evil network: Sagade Ltd / ATECH-SAGADE AS6851 (85.234.190.0/23)

›
I've mentioned Sagade Ltd before, it's a totally Black Hat Latvian network that should be blocked on sight. Google's Safe Brows...
3 comments:

The Walking Dead on FXUK

›
Holy moley.. the FX TV channel in the UK certainly runs some intersting shows (Dexter, Breaking Bad, Better Off Ted). This latest one coming...

Evil network: Latnet Serviss Ltd (latnet.lv) AS2588 (159.148.117.0/24)

›
Latvia is definitely becoming a problem when it comes to black hat hosting. The 159.148.117.0/24 range (159.148.117.0 - 159.148.117.255) i...
Tuesday, 24 August 2010

north-europ.com job offer scam

›
This is a fraudulent job offer originating from an IP address in Vietnam, with a ridiculous salary for doing next to nothing: Hello messag...
1 comment:

There's more to this than meets the eye..

›
This is a straightforward money mule pitch, so nothing very interesting in the message itself.. From: james roberts <jamesroberts02@sif...
Friday, 13 August 2010

Weird scam mashup makes little sense

›
This is a weird mashup of an FBI scare scam and a lottery scam, spelling out very clearly that it is really an advanced fee fraud . It make...
Thursday, 12 August 2010

"Spam King Leo Kuvayev Jailed on Child Sex Charges"

›
A spammer.. and a kiddy fiddler (allegedly), notable Russian spammer Leo Kuvayev has been jailed on remand on charges of raping 50 childre...

Battle.Net / WOW Phish domains

›
I don't play World of Warcraft of Starcraft..but lots of people do and Blizzard accounts (used for playing the game online) are often a ...
Saturday, 7 August 2010

"Your Free Money with Grants 4 CD Set At Absolutely No Cost From Robert Allen"

›
I quite enjoy this spammy crap I get from Robert Allen, in all its breathless uselessness, from a company that only rates a D+ from the BBB ...
Friday, 6 August 2010

Evil network: MAXHOSTING Services / GlobalNET Bosnia (AS42560 / 77.78.239.0/23)

›
This summary is not available. Please click here to view the post.
1 comment:

"Thank you for scheduling your online payment" email leads to malware

›
The spammers seem to be busy today, using an old trick of embedded a spam in a template lifted from a legitimate business. This particular o...

Best Buy "Thank You, Your Anti-Virus Protection Plan has been renewed" email leads to malware

›
To prove that the Bad Guys have a sense of humour at least, this fake email claims to be a renewal subscription for Webroot: From: Best...
1 comment:

"Thanks for planning your event with Evite" mail leads to malware

›
This summary is not available. Please click here to view the post.
Thursday, 5 August 2010

"Shifflett Martin Stores" scam

›
As far as I can tell, there is no such company as "Shifflett Martin Stores", although there may be legitimate companies with a sim...
Wednesday, 4 August 2010

"Anatomy Of An Attempted Malware Scam"

›
If you work in IT Security then malicious ads are a regular pain in the backside.. and you probably wonder why "reputable" ad netw...
Friday, 30 July 2010

Evil network: Microlines (microlines.lv), AS2588 (79.135.128.0/19)

›
Latvia seems to be getting a bad reputation for supporting criminal activity. The latest accomplice is Microlines (microlines.lv) who mix ...

"Toyton Ltd" / todayisp.com / dboxs.org scam

›
We've seen this scam before , an alleged Chinese registrar claims that someone is buying a domain name similar to the one that you want ...
Thursday, 29 July 2010

freead.name / mybar.us / toolbarcom.org / adsnet.biz

›
A slightly novel attack, found injected into a Javascript library and using freshly-registered domains. The attack uses obfuscated Javascrip...
5 comments:

Phishing domains on M247 Ltd

›
I've never heard of M247 Ltd before today until their network came up as providing infrastructure for this scam . A few IPs over from th...

"eurjobs.org" fake job offer

›
There are a lot of these going on at the moment, this is another fake job offer trying to rope unsuspecting applicants into doing something ...