Dynamoo's Blog

Yet more fake job offers, following on from this long-running scam . This time the following domains are in use to solicit replies: jobbsl...

These sites and IPs seem to be distributing some sort of Zeus variant. In this case users are being enticed to download a file called Fattur...

84.22.161.169 (IOMART Ltd, UK) seems to have some problems with scam sites, such as the one mentioned in this post . I haven't had time ...

Oops. From: The Register marketing@theregister.co.uk Date: 24 October 2011 18:28 Subject: Apologies from The Register         Hello, ...

A post over at woozoo.nl caught my eye (in Nederlands , Google Translated to English ) about the netherlandjobb.com scam. Robert Krom goes ...

Two new domains being used to recruit for fake jobs, which actually turn out to be illegal activities such as money laundering. jobbworld....

Another bunch of domains being used to peddle fake jobs: canada-newjob.com netherlandjobb.com newjobrecruit.com These domains form par...

These fake "Scan from a Hewlett-Packard Officejet" emails have been around for a little while now. Here's a slightly new ver...

Another fake job domain, it-jobsearch.com follows on directly from these two reported yesterday . The domain is registered to the same fake...

There is currently a poorly detected (VirusTotal reports 1/43 ) Java exploit being distributed by 66.197.235.245 via injection attacks. One...

Cyanogenmod.com is a site offering legitmate custom firmware for Android devices. It's a popular site, pulling in about 100,000 unique U...

Two new fake job domains, forming part of the long-running "Lapatasker" scam . new-jobaccess.com simple-jobneed.com Emails fr...

The following IPs are related to the TDL/TDSS rootkit. 212.36.9.52 / gic-kbmtu0zkvwylf.com appears to be a C&C server. 94.63.149.10 9...

Here's an oddity: From: funforumcommuity@yahoo.com funforumcommuity@yahoo.com Date: 7 October 2011 11:02 Subject: [RE] New message...

91.220.35.38 contains several malicious domains, apparently connected with the Blackhole Exploit Kit. These sites are being promoted through...

This fake conference is actually likely to be a form of advanced fee fraud: From: Ms Regina Linus reginafedrick@yahoo.com Reply-To : re...

There's something evil on 194.219.29.139 [Forthnet SA, Athens], in this case it appears to related to the SpyEye trojan . In particular...

NOTE: You can find out who was operating NAPPPA here . Earlier this year, I came across a fake seminar outfit called the North American Pr...

Here we go again.. three new domains that form part of this long-running scam . all-cajobs.coma all-ukjobs.com alleur-positions.com Th...

Here's an annoying SMS spam sent from +447979520064 : Short on Cash? Need a payday loan? 100% Apps Processed. Up to £750 today. App...