Another Trickbot campaign overnight last night UK time. Pretends to be a bill coming from notifications@in.telstra.com.au. These have a slightly devious download mechanism. You get a wsf file in zip to start with. That has a hardcoded single site in the file. That downloads a .js file which has 4 or sometimes … Continue reading →