Tag Archives: botnet

The Many Faces of Emotet

You’ve probably heard the recent news of Microsoft’s attempt to take down the Trickbot botnet. An interesting correlation with this event (though perhaps not directly related..) is the sudden uptick of Emotet email spam shortly after the Microsoft news hit. … Continue reading

Posted in Informative | Tagged , , , , , , , | Leave a comment

Spam Analysis: Markings of an Emotet Phishing Email

On January 2020 researchers have reported that the Emotet botnet is back in action after taking a Christmas break. Following this we’ve seen an increase in spam volume. One of the main attack vectors of the Emotet botnet is email … Continue reading

Posted in Informative, Uncategorized | Tagged , , , , , | Leave a comment

New Botnet Activity Targeting Email Accounts

In the past week a new and emerging pattern is being observed which indicates cyber criminals have refined their techniques around attacking email accounts with the end goal of compromising the accounts for malicious purposes. Method A Botnet is being … Continue reading

Posted in Informative | Tagged , , , , , , , , | Leave a comment

SMTP AUTH Attacks, How Big is the Problem Really?

The duties of a Spam Auditor involves more than just spam filtering; it also covers other suspicious mail server activity. One example of suspect mail server activity is SMTP Auth attacks. Such attacks can be carried by a single attacker, … Continue reading

Posted in Informative | Tagged , , , , | Leave a comment

Does Politics affect Spam Outbreaks

While we are predominantly interested in email spam there are other attacks that can indicate ‘bad actors’, and the networks they operate from, that are worth examining. It can be tomorrow they change tactics and start sending spam. We couldn’t … Continue reading

Posted in Informative | Tagged , , , , | Leave a comment

It’s nice when Hackers make it easy..

A new bot seems to be making the rounds, but this time it is nice that this bot is easily identifiable. We’ve observed the bot perform three different behaviors so far: 1) Attempting to log in user accounts with a … Continue reading

Posted in Informative | Tagged , , , , | Leave a comment

From Russia With Love

For most people with decent spam protection, you should not see these types of spam, as they are mostly from compromised Iot (Internet of Things) devices, on home style connections, and not coming from normal email servers, but it is … Continue reading

Posted in Informative | Tagged , , , , | 1 Comment

NetGear Equipment? Check your networks

The recent jump in spam attacks from ISP customers worldwide has spiked again, so we decided to do a little more digging. Much of the ‘ransomware’ spam has been sent in this manner, and while most email servers should be … Continue reading

Posted in Informative | Tagged , , , , , | Leave a comment

BotNets kick into high gear again worldwide

Okay, this isn’t that much of a threat as it seems, as most of it can be stopped by using simple RBL (Real Time Blacklists) that block the generic home style connections, sometimes referred to as DUL or Dynamic IP … Continue reading

Posted in Informative | Tagged , , , , , | Leave a comment

Is your CPE equipment secure?

It appears that a large spam bot has taken up a new home over the last couple of days, and in this case it appears to be NOT on consumer devices, computers, or servers, but on the very structure that … Continue reading

Posted in Informative | Tagged , , , , , | Leave a comment