Dynamoo's Blog

This fake LinkedIn spam leads to malware on 74.91.120.210: Date :      Mon, 30 Apr 2012 17:51:37 +0530 From :      "LinkedIn reminde...

There's a spam run this morning (probably one of the familiar LinkedIn / Printer / CareerBuilder / Pizza / etc spams) that is trying t...

The fake pill pushers are getting inventing, this spam leads to a fake pharma site on healthcarewelbizness.com : Date :      Fri, 27 Apr ...

Another variation in the never-ending malicious spam campaign that has been going on for months, leading to malware on 74.91.114.83 . Date...

These fake CareerBuilder messages attempt to download malware from popcows.net via a legitimate hacked site. Date :      Fri, 27 Apr...

Another LinkedIn spam leading to malware, this time on 50.116.23.176 and 64.244.61.40 : Date :      Fri, 27 Apr 2012 16:19:17 +0800 From...

This fake Twitter spam leads to a fake pharmacy at medsdose.com but it could easily be adapted for malware. Date :      Thu, 26 Apr 2012 ...

There's some spam run or other active at the moment directing users to a legitimate hacked site and then a malware page at 205.251.65.19...

Some fake CareerBuilder emails leading to malware on masterisland.net : Date :      Thu, 26 Apr 2012 10:40:58 -0430 From :      Vielka@si...

This LinkedIn spam leads to malware on 199.115.229.55 after bouncing through a couple of legitimate hacked sites, a technique that we haven...

This fake Facebook spam leads to a fake pharma site, but it could easily be adapted for malware. Date :      Thu, 26 Apr 2012 09:33:46 -07...

Some fake Facebook spam leading to malware, this time on 216.119.142.235 . Date :      Wed, 25 Apr 2012 05:48:16 +0200 From :      Facebo...

Some sites appear to have been hit by a sophisticated multi-part injection attack that triggers only once per IP (so difficult to track do...

82.211.45.81 (Accelerated IT Services GmbH, Germany) is another server with a bunch of subdomains of hacked GoDaddy accounts, apparently be...

Oh my. Yet another LinkedIn spam run.. Date :      Tue, 24 Apr 2012 16:31:34 -0300 From :      "Russ Connor" [enviousnessi07...

The ISC is warning of an injection attack using the domain nikjju.com . The WHOIS details of this domain are very familiar: Registrant Co...

This spam leads to a fake pharmacy on newprescriptionmedical.com , but it could be easily adapted for malware. Date :      Tue, 24 Apr 201...

Another US Airways spam run, leading to malware on 208.117.43.8 ( as with this Pizza spam campaign ). Date :      Tue, 24 Apr 2012 20:12:3...

Another Pizza spam leading to malware: Date :      Tue, 24 Apr 2012 02:21:42 +0800 From :      "ORSO`s Pizzeria" Subject : ...

Another fake printer spam leading to malware.. From :     CheyanneDelasancha@hotmail.com Date :     23 April 2012 13:18 Subject :     Re...