Fake delivery notification delivers some sort of keylogger, possibly Ramnit Banking Trojan

I have received something a bit weird and wonderful this Saturday morning. I can’t quite work out what malware it is supposed to deliver. I can’t get anything & Anyrun fails using a 32 bit VM. ( a subsequent run using a W10 64 VM and setting to MITM did give the complete chain, but I still don’t know what is actually is. It looks like some sort of keylogger. I saw a similar campaign spoofing well known delivery companies back in March 2018 where it was discovered that the delivery chain was being called ” Snatchloader”  which was delivering Continue reading →

The post Fake delivery notification delivers some sort of keylogger, possibly Ramnit Banking Trojan appeared first on My Online Security.