Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Friday, 8 October 2010

position-nl.com fake job offer

›
A retread of this fake job offer , this time using the domains position-nl.com to solicit replies (there's also a position-gb.com and ...
Wednesday, 6 October 2010

F35 Fighters.. going cheap!

›
The F35 is an advanced US built fighter that the UK may or may not buy to put on aircraft carriers that it may or may not build. These thing...
Tuesday, 28 September 2010

MS10-070 - don't panic.. on second thoughts.. PANIC

›
Those of you who know Microsoft patch levels probably already treat "Important" patches with a shrug, because the really important...
1 comment:
Monday, 27 September 2010

"United Nation Bonded Warehouse Wales" scam

›
An obvious scam, but one that's really quite stupid: From: AHMED SALEH ABDUL KHALEQ SLAEH ALAFIFI <info@khaliq.com> Reply-To: k...
Friday, 24 September 2010

position-gb.com / position-west.com fake job offer

›
Part of a long series of fake job offers , this one uses the domains position-gb.com and position-west.com to solicit replies. In this case ...
Wednesday, 22 September 2010

Evil network: VLine Ltd / VLINERU2-NET AS39150 (109.196.128.0/20)

›
This summary is not available. Please click here to view the post.
Tuesday, 21 September 2010

FirearmsForYou.com and the Chinese connection

›
Automated link exchange requests are annoying, but usually easily dealt with by binning them. This idiot decided to send me the same spam 25...
1 comment:
Monday, 20 September 2010

The incredibly dangerous world of browser prefetch

›
Perhaps I've been living under a rock, but this apparently has been a suicidally stupid feature built into Firefox for some time, but it...
Sunday, 19 September 2010

"hello / how are you?" mystery spam

›
I'm probably not alone in receiving a shedload of spam with the subject " hello " and the only content of " how are you? ...
3 comments:
Friday, 17 September 2010

Networking4Africa.com - scam, spam or Joe Job?

›
This summary is not available. Please click here to view the post.
Thursday, 16 September 2010

Krebs pwnage

›
Brian Krebs is on the trail of some questionable activities involving an outfit called ePassporte . Now, for those of you who don't know...
Thursday, 9 September 2010

Evil network: MAXHOSTING Services, kfppp.com and the BBC Radio 3 compromise

›
MAXHOSTING are a fairly prolific evil network that I profiled last month , so it isn't a huge surprise to see that the evilness continu...
Monday, 6 September 2010

Tainted network: InterWeb Media / Gogax.com AS21793 (76.76.96.0/19)

›
This summary is not available. Please click here to view the post.
12 comments:
Friday, 3 September 2010

Tainted network: Serverconnect.se / serverconnect-dedicateserver-net AS49770 (95.143.193.0/23)

›
Not a fully evil network, but AS49770 (owned by Serverconnect.se) has been abused by the bad guys for a long, long time. This particular /23...

nl-position.com fake job offer

›
In what appears to be an update of this fake job offer , there is now a spam run soliciting replies to nl-position.com for "representa...
3 comments:
Wednesday, 25 August 2010

Evil network: Sagade Ltd / ATECH-SAGADE AS6851 (85.234.190.0/23)

›
I've mentioned Sagade Ltd before, it's a totally Black Hat Latvian network that should be blocked on sight. Google's Safe Brows...
3 comments:

The Walking Dead on FXUK

›
Holy moley.. the FX TV channel in the UK certainly runs some intersting shows (Dexter, Breaking Bad, Better Off Ted). This latest one coming...

Evil network: Latnet Serviss Ltd (latnet.lv) AS2588 (159.148.117.0/24)

›
Latvia is definitely becoming a problem when it comes to black hat hosting. The 159.148.117.0/24 range (159.148.117.0 - 159.148.117.255) i...
Tuesday, 24 August 2010

north-europ.com job offer scam

›
This is a fraudulent job offer originating from an IP address in Vietnam, with a ridiculous salary for doing next to nothing: Hello messag...
1 comment:

There's more to this than meets the eye..

›
This is a straightforward money mule pitch, so nothing very interesting in the message itself.. From: james roberts <jamesroberts02@sif...
‹
›
Home
View web version
Powered by Blogger.