Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Tuesday, 21 January 2014

Something evil on 5.254.96.240 and 185.5.55.75

›
This malware attack appears to be aimed at German speakers, and is presumably spreading through spam although I don't have a sample of...
1 comment:
Monday, 20 January 2014

WhatsApp "A friend of yours has just sent you a pic" spam

›
This fake WhatsApp spam has a malicious attachment: Date:      Mon, 20 Jan 2014 06:23:28 -0500 [06:23:28 EST] From:      WhatsApp [{mes...

"Thank you for scheduling a payment to Bill Me Later" spam

›
This fake Bill Me Later spam has a malicious attachment: Date:      Mon, 20 Jan 2014 14:23:08 +0000 [09:23:08 EST] From:      Bill Me La...
Thursday, 16 January 2014

"ACTION REQUIRED: A document has arrived for your review/approval (Document Flow Manager)" spam

›
This spam with a lengthy subject has a malicious attachment: Date:      Thu, 16 Jan 2014 09:39:28 -0600 [10:39:28 EST] From:      ...

Ongoing Fake flash update via .js injection and SkyDrive, Part I

›
Over the past few days I have seen several cases where legitimate websites have had .js files interfered with in order to serve up somethi...
2 comments:

Cushion Redirect sites using hijacked GoDaddy domains to block

›
A very quick write-up about some suspect activity on 194.28.175.129 (BESTHOSTING-AS ON-LINE Ltd, Ukraine) which appears to be hosting som...
1 comment:

ilmeteo.it hacked

›
Popular Italian weather site ilmeteo.it appears to have been compromised this morning, with several legitimate .js files on the site alte...
2 comments:
Wednesday, 15 January 2014

Staples "Your order is awaiting verification!" spam

›
This fake Staples spam has a malicious attachment: Date:      Wed, 15 Jan 2014 15:40:44 +0800 [02:40:44 EST] From:      Staples Advanta...
Tuesday, 14 January 2014

PG&E "Gas and Electric Usage Statement" spam

›
This fake spam from the Pacific Gas & Electric company is presumably meant to have a malicious payload, but all I get is a server err...
1 comment:

"Uncensored download" spam leads to adware

›
I've been plagued with these over the past few days, emails coming in with the following subjects: Underground XXX files Free porno ...

HSBC "Payment Advice" spam / Payment Advice.exe

›
This fake HSBC spam comes with a malicious attachment: Date:      Tue, 14 Jan 2014 11:57:29 -0300 [09:57:29 EST] From:      HSBC Advisi...
1 comment:
Monday, 13 January 2014

"Department of Treasury Notice of Outstanding Obligation" spam

›
This US Treasury spam (but apparently sent from salesforce.com) has a malicious attachment: Date:      Mon, 13 Jan 2014 18:54:16 +070...
Friday, 10 January 2014

Marketing1.net spam

›
These spammers sent their sales pitch to a random info@ email address on an unused domain I use. And what are they selling? Email marketin...
6 comments:
Wednesday, 8 January 2014

More "Voice Message from Unknown" spam

›
Another bunch of fake "voice message" spams with a malicious payload are doing the rounds, for example: Subject: Voice Messa...
Monday, 6 January 2014

"Unauthorized Activity on your Amazon account" phish

›
The New Year seems to have brought a new wave of phishing emails, here's a new one looking for Amazon credentials. Date:      Mon, ...

Tracking the fake profiles used by scammers

›
My interest was grabbed by this weirdly mistranslated email, which appears to have been badly written in English and then put through a tr...
1 comment:
Thursday, 2 January 2014

Windows.old, and the Windows XP to Windows 8.1 gotcha

›
So I finally got around to the long over-due task of migrating my main system off Windows XP 32-bit (because it is going out of support so...
1 comment:
Friday, 27 December 2013

Odd "Wire transfer to your account" spam

›
Almost all spam tends to be some sort of scam or some sort of malware. I can't quite figure this one out though. From:     Andrew C...
Monday, 23 December 2013

"Hearing of your case in Court NR#6976" spam

›
I've had quite a few spams with a similar payload to this that I can't even Unzip. Go figure. But this one is an interesting varia...
73 comments:

QuickBooks spam / Invoice.zip

›
This fake QuickBooks spam has a malicious attachment: Date:      Mon, 23 Dec 2013 07:54:35 -0800 [10:54:35 EST] From:      QuickBooks I...
1 comment:
‹
›
Home
View web version
Powered by Blogger.