Fake Lloyds Bank “Case Number: 238963BACS” delivers Trickbot

After the last couple of weeks of the Trickbot gang playing around with weird & wonderful and slightly more complicated delivery methods, they have today reverted to the tried & trusted formats.  This example is today’s latest spoof or imitation of a well-known company, bank or public authority delivering Trickbot banking Trojan. The email with the subject of “Case Number: 238963BACS” pretends to come from Lloyds Bank but actually comes from “noreply@lloydsbank-bacs.com” which is a look-a-like,  typo-squatted or other domain that can easily be misidentified, mistaken or confused with the genuine site. These all have a malicious office file attachment. Continue reading →