The second in today’s Trickbot versions has reverted to the tried & trusted Macros in word docs. This one targets the USA rather than UK but keeping to the same theme of the country’s Tax & Revenue Authority. They have also kept on using the same compromised websites to deliver the Trickbot binary, although a different version to the earlier UK run spoofing HMRC This example is an email containing the subject of ” Important Documents ” pretending to come from Internal Revenue Service but actually coming from a look-a-like or typo-squatted domain “no-reply@irs-docs.com” with a malicious word doc attachment is today’s latest spoof of … Continue reading →
The post Fake IRS ” Important Documents ” delivers Trickbot appeared first on My Online Security.