Dynamoo's Blog

Another fake HP scan spam email leading to malware. This one follows the new technique of putting a malicious HTML ( HP_Scan.htm ) file ins...

Another US Airways spam, malformed this time, pointing to malware on 209.59.218.94. Date :      Thu, 5 Apr 2012 14:10:48 +0000 From :    ...

Another US Airways spam leading to malware on a Directspace IP (174.140.171.117) Date :      Thu, 5 Apr 2012 18:54:19 +0700 From :      ...

We're seeing a huge spam run at the moment with various subject and attachments, but typically using an HTML-in-ZIP attack with an attac...

Another one of a spate of fake US Airways emails, with a link leading to malware: From :     US Airways - Reservations reservations@myusa...

playbill.com covers listings and tickets for theatre events in New York and London. It's a popular site in the US, ranked 3350 accordin...

This "End of Aug. Statement" spam uses the same malicious payload as this one earlier today . From : Margo Lawrence [mailto:robb...

Another fake Intuit spam leading to malware, this time on dhjhgfkjsldkjdj.ru : Date:      Wed, 4 Apr 2012 11:33:37 +0100 From:      pX...

These scumbag SMS spammers are at it again: URGENT: We have been trying to contact you regards your recent accident; you could be due up ...

Another US Airways fake email leading to malware: Date :      Tue, 3 Apr 2012 14:26:03 +0200 From :      "US Airways - Reservations...

This spam appears to be some sort of probing attack, looking for valid email addresses. In this case, the email was send to an address that ...

This spam appears to be from US Airways, but it actually leads to malware on 174.140.171.173 . From :     US Airways - Reservations suppor...

I hate SMS Spam.. this one is particularly annoying. Loan update: Brand new lender, up to £1000 instant approval all online. No Fees. www....

And there's yet another USPS spam doing the rounds, this time the malicious payload is on 174.140.163.119 (Directspace US, report here...

Yet another USPS spam is doing the rounds, this time leading to a malicious payload on 50.116.19.155 . Date :      Fri, 30 Mar 2012 13:47:...

Currently there is an email attack running similar to this one earlier today , but in this case the malware is on 50.56.208.113:8080/showthr...

Another USPS spam leading to malware on clearschooner.com : Date :      Thu, 29 Mar 2012 09:02:35 -0300 From :      "Leonardo Ran...

Another malicious HTML-in-ZIP attack, this time leading to malware on samsonikonyou.ru From : ROSALBA Poe [mailto:victimname@hotmail.co...

This fake HP email has a ZIP attachment, containing an HTML file that leads to malware. The ZIP format is presumably being used to get pas...

From WeAreSpammers: This link goes to malware via baumanmarketing.com ( 195.78.33.120 , Croatia.. most likely a hacked legitimate site) t...