trickbot via Fake NatWest BankLine Support “FW: Recent Activity “

This example is today’s latest spoof or imitation of a well-known company, bank or public authority delivering Trickbot banking Trojan. The email with the subject of “FW: Recent Activity ” pretends to come from Lorna Davis at  NatWest Bankline but actually comes from “donotreply@bankline-reports.co.uk” which is a look-a-like,  typo-squatted or other domain that can easily be misidentified, mistaken or confused with the genuine site. These have a malicious office file attachment Today again they are using  XLS ( Excel Spreadsheet) files. NatWest Bankline has not been hacked or had their email or other servers compromised. They are not sending the Continue reading →