Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Tuesday, 21 December 2010

uk-resum.com fake job offer

›
This fake job offer originated from an IP address in Latvia (84.245.203.63) and solicits replies to a domain uk-resum.com registered in Rus...
4 comments:
Monday, 20 December 2010

Gawker related attack from 174.132.178.37

›
The recent Gawker media hack is probably related to a spate of malicious activity from 174.132.178.37 , trying to log into forums, accordin...
6 comments:
Friday, 3 December 2010

Beware of worid-of-books.com

›
worid-of-books.com is a fake book download site punting malicious executables. The strange name can be explained if you substitute the lowe...
7 comments:

Evil network: Asociatia Family Network Connections / FAMILY-NETWORK AS49253 (95.64.110.0/23)

›
Asociatia Family Network Connections / FAMILY-NETWORK is a Romanian network, and their AS49253 netblock seems to have suddenly turned evil. ...
3 comments:
Wednesday, 1 December 2010

Evil network: Informex / INFORMEX-NET AS20564 (193.178.172.0/24)

›
Informex on AS20564 (193.178.172.0/24) is a Ukranian operation implicated in a lot of bad things including banking trojans. SiteVet.com f...
Friday, 26 November 2010

Dynamoo.com is 10!

›
Dynamoo.com is 10 years old this week! Registered way back on 24th November 2000.. there wasn't much to see back then. Some would argue ...

Slimeware sites to block

›
If you work in corporate IT, then you've probably had users come across sites that appear to be things like Acrobat Reader, Google Earth...
Wednesday, 24 November 2010

MarketBay.. yuk!

›
This post on the Sunbelt blog about apparently bogus anti-virus software rang a bell.. there was something eerily familiar about this whole...
Friday, 19 November 2010

It's 30 for a reason, part 2

›
This guy claims that he was doing 20mph before he demolished about 15 metres of fencing, two gateposts and one gate before hitting my house....
Monday, 8 November 2010

theciosummits.org / CIO Summits spam

›
theciosummits.org / CIO Summits is the same outfit as BizSummits  who have a particular spamming technique that has been seen before . T...
4 comments:

Massive yourfreeworld.com / downlinegoldmine.com spam run

›
Sometimes it is difficult to tell if a spam run is a Joe Job , or if the spammer is really a moron. Over the past few hours, a massive spa...
4 comments:
Monday, 1 November 2010

europa-consult.com job offer scam

›
Another scam email in a long-running series of fake job offers, this time using the domain europa-consult.com (not to be confused with any ...
4 comments:
Friday, 29 October 2010

"Polden Financial" / poldenfs.co.uk spam

›
This following spam was sent to a complete invalid email address, most likely harvested from the web. Although I suspect that the sender pro...

Rev2Share.com spam

›
Following one a day from this almost identical MySuperShares.com spam, this email also appears to be trying to game a "get rich quick...
Thursday, 28 October 2010

MySuperShares.com spam

›
In my view, all MLM schemes are almost always scams.. and MySuperShares.com seems to be just another MLM scheme, this time selling "ad...
1 comment:

Evil network: Alex Gorbunov / GORBY-VPN-NET AS51303 (195.226.197.0/24)

›
A small but nasty netblock hosting ZeuS C&C servers and Phoenix exploit kit attacks, GORBY-VPN-NET (registered to an Alex Gorbunov) seem...
Tuesday, 26 October 2010

"Bikini Robot Army" spam

›
I've never listened to Bikini Robot Army (although for some reason I have heard of them), but this spam run I was at the wrong end of d...
1 comment:
Sunday, 24 October 2010

"america-newresume.com" scam

›
This scam has been around for a while, strangely it spells out "NB" in the full Latin of "Nota Bene". You don't see ...
Saturday, 23 October 2010

sshopper.net "mystery shopper" scam

›
We've seen this scam before , but this type the mystery shopper scam uses a domain of sshopper.net to solicit replies. Avoid. Re: MS...
Friday, 22 October 2010

"MR.BANKY MOON" scam

›
This one is from "MR.BANKY MOON" who is apparently the "UN SEC.GENERAL.", but for some reason he's using a free Gmai...
‹
›
Home
View web version
Powered by Blogger.