Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Thursday, 31 March 2011

alleurope-consult.com job scam

›
Another fake job offer in this long running job scam , alleurope-consult.com is probably another money mule operation. The email is pretty ...
Monday, 28 March 2011

Wanna buy an aircraft carrier?

›
Because we British have decided that we don't need to have aircraft carriers, because we're not bombing anywhere in particular at th...
Saturday, 26 March 2011

Mango Ideas / gsid.net is now clean

›
Just a quick note to say that Mango Ideas cleaned up their network from this incident which was possibly due to a reseller or perhaps a com...
1 comment:
Thursday, 24 March 2011

west-ugroup.net (and other) fake job offers

›
Another fake job offer in this very long running scam , the job involved is actually in support of organised crime and may involve such thin...
Monday, 21 March 2011

Evil network: Intermedia Top SRL / INTERMEDIA-TOP AS49873 (95.64.8.0/24)

›
Intermedia Top SRL is a Romanian host operating a network in the 95.64.8.0/24 range. This range appears to contain nothing but malicious si...
Tuesday, 8 March 2011

"Debt Advice UK" Sussex

›
You know when you are dealing with a dodgy outfit when they robo-call your mobile from a supressed number with a recorded message that start...
1 comment:
Monday, 7 March 2011

Evil network: Sagade Latvia AS52055 (46.252.130.0/23) and traff4you.info

›
I've covered Sagade before , which appears to be a completely black hat web host with no legitimate domains at all. Sagade appear to hav...
Tuesday, 15 February 2011

Scam: "North American Program Planning and Policy Academy (NAPPPA)"

›
NOTE: You can find out who was operating NAPPPA here Fake seminars are an unusual way of scamming money from people, but this one appears ...
34 comments:
Thursday, 10 February 2011

Evil network: Voejkova Nadezhda / VOEJNA-NET AS51441 (91.217.162.0/24) aka tirexhost.com

›
Voejkova Nadezhda, aka VOEJNA-NET and also known as tirexhost.com is a netblock allegedly based in the Ukraine, but apparently operated out ...
Monday, 7 February 2011

Evil network: Didjief LLC / DIGIEF-NET AS48709 (91.200.242.0/23)

›
Didjief  LLC - or to give its full (and presumably fake) name "Didjief Internation Kulinari Koncept LLC" - runs a wholly maliciou...
1 comment:
Tuesday, 21 December 2010

uk-resum.com fake job offer

›
This fake job offer originated from an IP address in Latvia (84.245.203.63) and solicits replies to a domain uk-resum.com registered in Rus...
4 comments:
Monday, 20 December 2010

Gawker related attack from 174.132.178.37

›
The recent Gawker media hack is probably related to a spate of malicious activity from 174.132.178.37 , trying to log into forums, accordin...
6 comments:
Friday, 3 December 2010

Beware of worid-of-books.com

›
worid-of-books.com is a fake book download site punting malicious executables. The strange name can be explained if you substitute the lowe...
7 comments:

Evil network: Asociatia Family Network Connections / FAMILY-NETWORK AS49253 (95.64.110.0/23)

›
Asociatia Family Network Connections / FAMILY-NETWORK is a Romanian network, and their AS49253 netblock seems to have suddenly turned evil. ...
3 comments:
Wednesday, 1 December 2010

Evil network: Informex / INFORMEX-NET AS20564 (193.178.172.0/24)

›
Informex on AS20564 (193.178.172.0/24) is a Ukranian operation implicated in a lot of bad things including banking trojans. SiteVet.com f...
Friday, 26 November 2010

Dynamoo.com is 10!

›
Dynamoo.com is 10 years old this week! Registered way back on 24th November 2000.. there wasn't much to see back then. Some would argue ...

Slimeware sites to block

›
If you work in corporate IT, then you've probably had users come across sites that appear to be things like Acrobat Reader, Google Earth...
Wednesday, 24 November 2010

MarketBay.. yuk!

›
This post on the Sunbelt blog about apparently bogus anti-virus software rang a bell.. there was something eerily familiar about this whole...
Friday, 19 November 2010

It's 30 for a reason, part 2

›
This guy claims that he was doing 20mph before he demolished about 15 metres of fencing, two gateposts and one gate before hitting my house....
Monday, 8 November 2010

theciosummits.org / CIO Summits spam

›
theciosummits.org / CIO Summits is the same outfit as BizSummits  who have a particular spamming technique that has been seen before . T...
4 comments:
‹
›
Home
View web version
Powered by Blogger.