The second in today’s trickbot malspam campaigns is targeted at USA rather than UK and Europe. This example is an email containing the subject of “ADP sent you a new document to sign ” pretending to come from Docusign but actually coming from a look-a-like or typo-squatted domain delivery@docusign-email.com with a malicious word doc attachment is today’s latest spoof of a well-known company, bank or public authority delivering Trickbot banking Trojan The criminals sending these are continuing with the trend of compromising SEO companies hosted on the same IP address as yesterday and earlier today by Godaddy to actually deliver the trickbot payload. … Continue reading →
The post Fake Docusign “ADP sent you a new document to sign” delivers Trickbot appeared first on My Online Security.