Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Friday, 6 March 2015

Fake job offer: jobinituk.com / jobsinits.com / workincroatia.com

›
This spammed out "job offer" is actually an attempt to recruit people into criminal money laundering. Date :    6 March 2015 a...
7 comments:

Malware spam: "Mick George Invoice 395687" / "Mick George Invoicing [mginv@mickgeorge.co.uk]"

›
This malformed spam is meant to have a malicious attachment: From :    Mick George Invoicing [mginv@mickgeorge.co.uk] Date :    6 Marc...

Malware spam: "Your 2015 Electronic IP Pin!" / "Internal Revenue Service [refund.noreply@irs.gov]"

›
This fake IRS email comes with a malicious attachment. From :    Internal Revenue Service [refund.noreply@irs.gov] Date :    6 March 2...

Malware spam: "Your online Gateway.gov.uk Submission"

›
This fake Government spam leads to malware. From :    Gateway.gov.uk Date :    6 March 2015 at 11:49 Subject :    Your online Gateway...

Malware spam: "You have received a new secure message from BankLine" / "Bankline [secure.message@business.natwest.com]"

›
This fake banking spam leads to malware. From :    Bankline [secure.message@business.natwest.com] Date :    6 March 2015 at 10:36 Sub...
Thursday, 5 March 2015

Malware spam: "Credit Control [cc@pentafoods.com]"/ "Penta invoice I0026098"

›
This spam email does not come from Penta Foods, instead it is a simple forgery with a malicious attachment. From :    Credit Control [cc...
3 comments:

Malware spam: "Bobby Drell [rob@abbottpainting.com]" / "Brochure2.doc"

›
This spam does not come from Bobby Drell or Abbott Painting, instead it is a simple forgery with a malicious attachment. From :    Bobby...
Wednesday, 4 March 2015

"Remittance advice" spam has a mystery XML attachment

›
I haven't worked this out yet, but this appears to be a malware spam run using an XML document that contains an ActiveX element. ...
1 comment:

Malware spam: "John Donald [john@kingfishermanagement.uk.com]" / "Document1"

›
This rather terse email comes with a malicious attachment: From :    John Donald [john@kingfishermanagement.uk.com] Date :    4 March 20...
Sunday, 1 March 2015

Fake job offer: "ukhomejob.com" and many others

›
This spam email for a fake (and illegal) job is soliciting replies to ukhomejob.com . It is part of a nework of fraudulent domains, attemp...
2 comments:
Saturday, 28 February 2015

Fake job offer: tradeconstruction.co.uk, spoofing the legitimate Trade Construction Company LLC

›
This fake job offer claimed to be from a UK-based company called Trade Construction Company LLC using a website at tradeconstruction.co.u...
1 comment:
Friday, 27 February 2015

Malware spam: "Dennys Invoice INV650988" / "accounts@dennys.co.uk"

›
This fake invoice email is not from Dennys but is a simple forgery with a malicious attachment. Dennys are not sending the spam, and thei...
Thursday, 26 February 2015

Malware spam: "Chris Christou [chris.christou@greysimmonds.co.uk]" / "Copy invoices"

›
This fake invoice spam comes with a malicious attachment: From :    Chris Christou [chris.christou@greysimmonds.co.uk] Date :    26 Feb...
Wednesday, 25 February 2015

Malware spam: "Your LogMeIn Pro payment has been processed!"

›
This fake financial email does not come from LogMeIn, instead it has a malicious attachment: From:    LogMeIn.com [no_reply@logmein.com...

Malware spam: 'Info Chemicals shared "MT 103_PO_NO!014.zip" with you' uses Dropbox

›
This spam leads to a malware download via Dropbox. From :    Info via Dropbox Reply-To :    hcm0366@gmail.com Date :    25 February 201...
Tuesday, 24 February 2015

Malware spam: "ArsenaL LTD" / "document do confirm" / "Izabela Pachucka [pachuckaizabela@arsenalltd.pl]"

›
ArsenaL LTD are a wholly legitimate Polish firm, but they are not sending out this email nor have their systems been compromised in any w...

Malware spam: "Berendsen UK Ltd Invoice 60020918 117" / "donotreply@berendsen.co.uk"

›
This fake invoice is not from Berendsen UK Ltd but is a simple forgery. They are not sending out the spam and their systems have not been...
2 comments:
Thursday, 19 February 2015

Malware spam: "State Department" / "Order state T/N:" with a hidden message

›
These spam emails claim both to be from the "State Department" and somebody else at the same time, so I guess they must have bee...
1 comment:

Malware spam: "This is your Remittance Advice #CCI36306" / "Violet Garner [Jodi.1d@ip-35-29-71-77.bgwan.com]" / "Saint Gobain UK"

›
This fake financial email does not come from Saint Gobain UK but is instead a forgery with a malicous attachment. From :    Violet Garne...

Malware spam: "Marylou Champagne [marylou@droitcour.com]" / "Proforma Invoice"

›
This fake financial spam comes with a malicious attachment: From :    Marylou Champagne [marylou@droitcour.com] Date :    19 February 2...
‹
›
Home
View web version
Powered by Blogger.