Continuing with the never ending series of Japanese language malspam malware downloaders that normally deliver Ursnif /Gozi / ISFB banking Trojan is yet another email with the subject of Express Mail Service (EMS) with an XLS attachment with embedded macros. Quite unusually for this gang, all the versions we have received so … Continue reading →