Thursday, 8 August 2013

Facebook spam / hubby-wife.com and 72.249.76.197

›
This fake Facebook spam leads to malware on hubby-wife.com : Date:      Thu, 8 Aug 2013 09:36:19 -0800 [13:36:19 EDT] From:      Faceb...

eFax / jConnect spam and eliehabib.com

›
This fake fax spam leads to malware on eliehabib.com : Date:      Wed, 7 Aug 2013 13:05:22 -0600 [15:05:22 EDT] From:      Fax Message...
Tuesday, 6 August 2013

Pharma sites to block 6/8/13

›
A new list of pharma sites and IPs, related to this bunch . 61.150.109.186 (China Telecom, China) 91.199.149.238 (Novosibirsk A3 Ltd, Ru...

Malware sites to block 6/8/13

›
Following on from last week's list , this week seems to see a smaller number of servers and malicious domains from this crew . 5.175...

What is 65.222.202.0/24?

›
A breakdown of the suballocations of the Verizon Business 65.222.202.0/24 block, mentioned in connection with Torsploit : B...
Monday, 5 August 2013

Torsploit: is 65.222.202.53 the NSA?

›
There has been a lot of chatter in the past day or so about the takedown of an Irish outfit called Freedom Hosting which hosted a number ...
4 comments:

alliexfinancial.com / Alliexfinancial Ltd "Legal Registered Investment company" spam (is it a scam?)

›
A slightly odd spam, sent to a scraped email address: From :     Dirk Nunes [flamwood888@gmail.com] Date :     5 August 2013 10:54 Su...
4 comments:
Sunday, 4 August 2013

BLDW "Building Turbines Corp" pump-and-dump spam

›
This illegal spam run almost definitely does not come from Building Turbines Corp (BLDW) but instead someone trying to game the system thr...
1 comment:
Friday, 2 August 2013

redwoodoptions.com "Joe Job" spam

›
I don't know anything about " Redwood Options " redwoodoptions.com but it seems to deal in binary options . In my personal ...

cpro.su "Joe Job" spam run

›
This spam run is aimed at disrupting the underground forum cpro.su : Subject: International carding board on new domain Subject: Private...

Malekal.com "Joe Job" spam

›
Update: there is a new version of this Joe Job spam, now mentioning this post in the body text ( more info ). Malekal's Site   is a...
2 comments:

MoneyGram "Payment notification email" spam / drstephenlwolman.com

›
This fake MoneyGram spam leads to malware on drstephenlwolman.com : Date:      Fri, 2 Aug 2013 22:23:53 +0330 [14:53:53 EDT] From:     ...

"Your most recent payment has been processed" spam / capitalagreements.com

›
This fake Discover Card spam leads to malware on capitalagreements.com : Date:      Fri, 2 Aug 2013 20:41:09 +0200 [14:41:09 EDT] From...
1 comment:
Thursday, 1 August 2013

Olborg Ltd / ОЛЬБОРГ / o1host.net (AS57636) revisited

›
Update :  I am trying to verify claims that Olborg Ltd are operating a sinkhole (which is a good thing) rather than a malware server (a ba...

Pump and dump spam flogs a dead horse with Biostem U.S. Corporation (HAIR)

›
About a month-and-a-half ago I had a look at the pump-and-dump spam promoting Biostem U.S. Corporation (HAIR) when it was trading at arou...
2 comments:
Wednesday, 31 July 2013

"Documento importante : 5039403 !!" spam / Planilha-Documento.docx_.rar

›
This terse Portuguese language spam has a malicious attachment: From:     Adriane Camargo. [adriane@yahoo.com.br] Date:     29 July 20...
Tuesday, 30 July 2013

Facebook spam / deltaoutriggercafe.com

›
These guys are busy. This fake Facebook spam leads to malware on deltaoutriggercafe.com : Date:      Tue, 30 Jul 2013 15:05:25 -0500 [1...