Trickbot delivered via Fake HSBC Payment Advice using activeX controls in word macros

Another pretty lame email from the Trickbot gang again today. Some days I really don’t understand this gang of criminals. They go to the bother of registering various look a like domains to send the emails from, so they might stand a better chance of fooling recipients.  They then create very effective macro enabled word docs using all sorts of tricks to avoid detection & install on the victim’s computer.  Then they go and send a stupidly lame email with no proper body content that absolutely screams this is a scam do not open me or do anything. The body Continue reading →

Source