Express Mail Service (EMS) fake invoice with Japanese language content malspam delivers banking Trojan

Continuing with the never ending series of Japanese language malspam malware downloaders  that normally deliver Ursnif /Gozi / ISFB banking Trojan is yet another email with the subject of Express Mail Service (EMS) with an XLS attachment with embedded  macros. Quite unusually for this gang, all the versions we have received so Continue reading →