Dynamoo's Blog

This fake remittance advice spam has been hammering my inbox this morning. It uses randomly generated sender names but has a consistent fa...

The IP address range of 46.161.30.0/24 (KolosokIvan-net) appears to be dedicated purely to providing phone-home servers for TorrentLocker ...

Another bunch of IPs on Crissic Solutions LLC, leading to what appears to be the Angler EK (see this URLquery report ): 167.160.164.102 ...

One of those things that makes you go "hmmm".. I kept seeing a lot of suspect looking traffic from Russian sites to sync.audtd.c...

Several IPs hosted on the Crissic Solutions range of 167.160.160.0/19 (suballocated from QuadraNet) have been hosting exploit kits in the...

This German-language spam leads to malware: Von : NTTCable Europe S.A. [mailto:info@reisebuerowerther.de] Gesendet : Mittwoch, 26. Nove...

This spam leads to malware: From :     Deutsche Telekom AG [g.dogan@idolcarpet.com] Date :     26 November 2014 at 06:57 Subject :     ...

A contact gave me the heads up to an exploit kit running on 104.152.215.90 [virustotal] which appears to be using MS16-064 among other t...

Fax spam again. How quaint. This spam appears to come from the person receiving it (which is an old trick ). From : victim@victimdomain...

As far as I can tell, there is no such thing as "Oplamo Herbal Root". So, this spam is almost definitely a scam. From :     M...

This German-language spam leads to malware. Von : Sparkasse IT AG [mailto:assistant@fourmusic.com] Gesendet : Freitag, 21. November 201...

When I saw this StockTips.com spam, I assumed that it was a pump-and-dump scam. From :     StockTips.com Date :     21 November 2014 07...

This fake financial spam has a malicious Word document attached. From :     Enid Tyson Date :     21 November 2014 15:36 Subject :   ...

46.8.14.154 (Netart Group S.r.o. / Movenix International Inc) forms part of an exploit chain that starts with compromised OpenX servers a...

Hang on, I think I need to load some more papyrus into the facsimile machine, the 1990s are back! From :     Incoming Fax [no-reply@efa...

This plague of spam "test messages" have been going on for two days now, probably sourced from " Botnet 125 " which se...

This fake fax spam comes with a malicious attachment From :     Interfax [uk@interfax.net] Date :     13 November 2014 20:29 Subject ...

Dear spammers, Sending links out like this to drive people to your fake meds site does not work. From: Tudu [tudu@tin.it] Sent: 15 No...