Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Monday, 14 January 2013

ADP spam / dekamerionka.ru

›
This fake ADP spam leads to malware on dekamerionka.ru: Date:      Mon, 14 Jan 2013 10:49:06 +0300 From:      Friendster Games [frien...
1 comment:

Malware sites to block 14/1/13

›
A couple of interesting posts over at Malware Must Die!   showed some significant nastiness on a few IP ranges you might want to block. ...
1 comment:
Friday, 11 January 2013

"Payroll Account Holded by Intuit" spam / dmeiweilik.ru

›
This fake Intuit (or LinkedIn?) spam leads to malware on dmeiweilik.ru : Date:      Fri, 11 Jan 2013 06:23:41 +0100 From:      Linked...
1 comment:

Changelog spam / dimanakasono.ru

›
This fake "Changelog" spam leads to malware on dimanakasono.ru: From: Ashley Madison [mailto:donotreply@ashleymadison.com] S...
1 comment:
Thursday, 10 January 2013

ADP spam / tetraboro.net and advertizing*.com

›
This fake ADP spam leads to malware on tetraboro.net . It contains some errors, one of which is the subject line just says "adp_subj...
Wednesday, 9 January 2013

BBB spam / hotelrosaire.net

›
This fake BBB spam leads to malware on hotelrosaire.net : Date:      Wed, 9 Jan 2013 09:21:32 -0600 [10:21:32 EST] From:      Better B...

ADP spam / demoralization.ru

›
This fake ADP spam leads to malware on demoralization.ru : Date:      Wed, 9 Jan 2013 04:23:03 -0600 From:      Habbo Hotel [auto-cont...

Something evil on 173.246.102.246

›
173.246.102.246 (Gandi, US) looks like it is being used for exploit kits being promoted either through malvertising or through exploited ...
Tuesday, 8 January 2013

PPI scam: 0843 410 0078

›
Short version:  If you're Googling this number to see who is ringing you, then the short answer is that it is a bunch of scammers tr...
7 comments:

BBB Spam / royalwinnipegballet.net

›
This fake BBB spam leads to malware on royalwinnipegballet.net: Date:      Tue, 8 Jan 2013 19:18:34 +0200 [12:18:34 EST] From:      Be...

"Federal ACH Announcement" spam / cookingcarlog.net

›
This rather terse spam leads to malware on cookingcarlog.net : From:     Federal Reserve Services@sys.frb.org [ACHR_59273219@fedmail.fr...

Malware sites to block 8/1/13

›
These IPs and domains appear to be active in malicious spam runs today: 41.168.5.140 42.121.116.38 62.76.186.24 82.165.193.26 91.224...
1 comment:
Wednesday, 2 January 2013

Malware sites to block 2/1/13 part II

›
This summary is not available. Please click here to view the post.
2 comments:

Malware sites to block 2/1/13

›
The following sites and IPs seem to be active today, being pushed out by spam campaigns. I'll post email samples when I get them. Perh...
Saturday, 29 December 2012

"How Fatima Started Islam" spam

›
This nasty anti-Islam email has been doing the rounds recently, I've received it several times over the past few months and decided th...

FedACH Announcement spam / incinteractive.net

›
This fake whatever-the-heck-it-is spam leads to malware on incinteractive.net: Date:      Fri, 28 Dec 2012 22:45:28 +0900 From:      ...
Friday, 28 December 2012

IRS Spam / tv-usib.com

›
This fake IRS spam leads to malware on tv-usib.com : Date:      Thu, 27 Dec 2012 22:14:44 +0400 From:      Internal Revenue Service [in...
Wednesday, 26 December 2012

NACHA spam / bunakaranka.ru:

›
This fake ACH / NACHA spam leads to malware on bunakaranka.ru : Date:      Wed, 26 Dec 2012 06:48:11 +0100 From:      Tagged [Tagged@t...

E-billing spam / proxfied.net

›
There are various e-billing spam emails circulating today, pointing to malware on proxfied.net : Date:      Wed, 26 Dec 2012 18:49:37 ...
Tuesday, 25 December 2012

Godless Eastern bloc commie athiests

›
Honestly, who sends this sort of crap out on Christmas day? Umm.. equally, who checks their spam filter on Christmas day. Anyway, this is ...
2 comments:
‹
›
Home
View web version
Powered by Blogger.