Dynamoo's Blog

This fake AT&T spam leads to malware on unboxhibernation.org:  From: Tonya Bates [mailto:robot@craigslist.org] Sent: 02 August 201...

There is currently an injection attack using a script pointing to [donotclick] xinthesidersdown.com/sl.php  doing the rounds. The malicious...

The following domains appear to be part of an ongoing injection attack (using lasimp04risoned.rr.nu at present). They are hosted by black-ha...

Another malicious spam run, although I don't have a sample of the actual spam this time.. however, the payload is at [donotclick] onli...

These fake "Federal Tax Transfer" spams lead to malware on retweetadministrator.org : Date:      Thu, 26 Jul 2012 20:56:10 +...

This "Adobe CS4 License" spam leads to malware on online-gaminatore.ru: Date :      Thu, 26 Jul 2012 09:24:01 +0900 From : ...

This fake "Wire Transfer" spam (or is it UPS?) leads to malware on furnitura-forums.ru: Date: Wed, 25 Jul 2012 09:12:43 -050...

This fake US Airways spam leads to malware on reformattedfilmmaker.org: Date : Wed, 25 Jul 2012 09:46:57 -0500 From : "US Air...

These fake PayPal spams lead to malware on teloexpressions.org: Date:      Tue, 24 Jul 2012 18:06:49 +0330 From:      "Allan Mar...

The PPI claim spammers are back again, this time using the throwaway number of +447969662555 Hi, we think you may be entitled to compe...

This fake wire transfer spam leads to malware on porschedesignrussia.ru: Date :      Fri, 20 Jul 2012 04:10:52 +0100 Subject :      RE...

I haven't seen this fake AICPA spam for a while, but here it is.. this time leading to a malicious payload on the domain jeffknitwear....

This fake wire transfer spam leads to malware at forumanarhist.ru : Date:      Thu, 19 Jul 2012 02:56:36 -0400 From:      CABALLEROFAN...

This spam contains an attachment leading to malware on phpforkiddies.ru: Date :      Wed, 18 Jul 2012 01:23:20 +0300 From :      ...

These fake Craigslist emails lead to malware on visorwordprocessor.org : Date:      Tue, 17 Jul 2012 09:01:11 -0500 From:      "cra...

This fake Intuit spam leads to malware on mailmergesfinger.org : Date:      Mon, 16 Jul 2012 18:10:26 +0000 From:      "Intuit P...

These (rather confused) spam emails lead to malware on cms-wideopendns.com : From: LinkedIn Communication [mailto:support@intuit.com] Sen...

This one has me scratching my head.. a series of emails this morning with subjects similar to the following: Error message [404] 404 Not F...

This fake UPS spam leads to malware on peace-computer.com: Date:      Wed, 11 Jul 2012 09:51:41 -0500 From:      "Margret Bella...

This fake Amazon spam leads to malware on savidae.net : Sent: 11 July 2012 15:12 Subject: Your Amazon.com order of "GoPro HD Helm...