Author Archives: Derek

Remittance Advice : Tue, 16 Feb 2016 16:55:29 +0800 fmis@oldham.gov.uk – word doc malware

Posted on by

Last revised or Updated on: 16th February, 2016, 9:12 AMAn email with the subject of Remittance Advice : Tue, 16 Feb 2016 16:55:29 +0800 pretending to come from fmis@oldham.gov.uk with a malicious word doc or Excel XLS spreadsheet attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza and ransomware like cryptolocker or Teslacrypt. They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The time in the subject is random The … Continue reading → Continue reading Remittance Advice : Tue, 16 Feb 2016 16:55:29 +0800 fmis@oldham.gov.uk – word doc malware→

Invoice (w/e 070216) Kelly Pegg – word doc malware

Posted on by

Last revised or Updated on: 15th February, 2016, 12:07 PMAn email with the subject of Invoice (w/e 070216) pretending to come from Kelly Pegg <kpegg@responserecruitment.co.uk> with a malicious word doc or Excel XLS spreadsheet attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza and ransomware like cryptolocker or Teslacrypt. They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The email looks like: From: Kelly Pegg <kpegg@responserecruitment.co.uk> Date: SKM_C3350160212101601.docm Subject: Invoice … Continue reading → Continue reading Invoice (w/e 070216) Kelly Pegg – word doc malware→

DVSA RECEIPT – word doc malware

Posted on by

Last revised or Updated on: 12th February, 2016, 11:38 AMAn email pretending to be a fixed penalty ticket with the subject of DVSA RECEIPT pretending to come from Nicholas.Davies.43@vosa.gsi.gov.uk; on behalf of; FPO.CC.44@vosa.gsi.gov.uk with a malicious word doc attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza and ransomware like cryptolocker or Teslacrypt. They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The email looks like: From: Nicholas.Davies.43@vosa.gsi.gov.uk; on behalf … Continue reading → Continue reading DVSA RECEIPT – word doc malware→

Your latest invoice from The Fuelcard Company UK Ltd – word doc or excel xls spreadsheet malware

Posted on by

Last revised or Updated on: 12th February, 2016, 11:32 AMAn email with the subject of Your latest invoice from The Fuelcard Company UK Ltd pretending to come from customerservice@fuelcards.co.uk  with a malicious word doc or Excel XLS spreadsheet attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza and ransomware like cryptolocker or Teslacrypt. They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The email looks like: From: customerservice@fuelcards.co.uk Date: … Continue reading → Continue reading Your latest invoice from The Fuelcard Company UK Ltd – word doc or excel xls spreadsheet malware→

Your Sage Pay Invoice INV00318132 – excel xls spreadsheet malware

Posted on by

Last revised or Updated on: 11th February, 2016, 2:12 PMAn email with the subject of  Your Sage Pay Invoice INV00318132 pretending to come from  Sagepay EU <accounts@sagepay.com> with a malicious word doc or Excel XLS spreadsheet attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza and ransomware like cryptolocker or Teslacrypt. They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The email looks like: From: Sagepay EU <accounts@sagepay.com> … Continue reading → Continue reading Your Sage Pay Invoice INV00318132 – excel xls spreadsheet malware→