Buchung/Rechnung DH80RK – JS malware – Locky Ransomware

Last revised or Updated on: 1st March, 2016, 11:26 AMA German language  email with the subject of  Buchung/Rechnung DH80RK pretending to come from Nurflug.de <info@nurflug.de> with a zip attachment is another one from the current bot runs which try to download various Trojans and password stealers especially banking credential stealers, which may include cridex, dridex, dyreza and various  Zbots, cryptolocker, ransomware and loads of other malware on your computer. They use email addresses and subjects that will entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The email looks like: From: Nurflug.de <info@nurflug.de> Date: Tue 01/03/2016 10:11 Subject: Buchung/Rechnung … Continue reading →