Dynamoo's Blog

This slimed its way into my mailbox: From :    Brad Smith [sales@unicorehealth.net] To :    Morgan Stanley [mstanley@redacted] Date :...

I've written about DINETHOSTING aka Digital Network JSC many times before, and frankly their entire IP range is a sea of crap, and I ...

This fake purchase order spam comes with a malicious attachment: From     Alison Longworth [ALongworth@usluk.com] Date     13/02/201...

This email with no body text comes with a malicious Excel attachment: From :    Amazon Marketplace [delivery@amazon.uk] Date :    13 F...

This spam comes from randomly-named companies, with slightly different body text and different subject in each case. Here is an example: ...

While researching this spam I came across a questionable OVH reseller using the 5.135.127.64/27 range, allocated to userlogin.me. organ...

This spam has a malicious attachment: From:    Hajime Daichi Date:    12 February 2015 at 15:59 Subject:    invoice :reminder Greet...

This fake BBB email has a malicious attachment. From : BBB Accreditation Services [no-replay@newyork.bbb.org] Date : Thu, 12 Feb 2015 ...

This fake invoice comes with a malicious attachment. It does not come from Minuteman Press, their systems have not been compromised in any...

This fake invoice does NOT comes from MBL Seminars , they are not sending this spam nor have their systems been compromised. Instead, this...

This fake invoice spam has a malicious attachment: From :    Lydia Oneal Date :    11 February 2015 at 09:14 Subject :    Your latest...

This spam comes with a malicious attachment: From :    Megtrade groups [venkianch@gmail.com] Reply-To :    venkanch@gmail.com Date :    1...

This quite interesting blog post from Cyphort got me digging into that part of the infection chain using nonsense .eu domains. It uncove...

This fake FedEx spam has a malicious script attached. From :    FedEx 2Day A.M. Date :    5 February 2015 at 15:01 Subject :    PETRO...

Two broadly equivalent investigations into child abuse rings, Operation Yewtree and Operation Fernbridge have had very different outcomes....

This fake finance spam pretends to be from the wholly legitimate firm Circor , but it is not. Instead, it is a forgery with a malicious Wo...

So far I have only seen one sample of this.. From     "Garth Hutchison" Date     21/01/2015 11:50 Subject     BACS Transfer :...

Kern Engineering & Mfg Corp. is a wholly legitimate firm, they are not sending out this spam nor have their systems been compromised ...

Sometimes I see some very sophisticated scams with lovely websites and a credible and convincing pitch to snare the unwary. This isn't...

This fake NatWest email leads to malware: From:    CardsOnLine [CardsOnLine@natwesti.com] Date:    26 January 2015 at 13:06 Subject: ...