Another BBC bitcoin scam. Email is from a compromised School email account

Following on from my previous post about the BBC being imitated to perform a bitcoin scam, we were asked to look at another email today, that was uploaded via our submissions system. This is slightly more alarming than the previous one.  The email is p… Continue reading Another BBC bitcoin scam. Email is from a compromised School email account

trickbot via fake Scotia Bank Incoming Wire Name and Account Mismatch

This example is today’s latest spoof or imitation of a well-known company, bank or public authority delivering Trickbot banking Trojan. The email with the subject of “ALERT – BB Wire: Extra Due Diligence* RE: Incoming Wire Name and Account Mismat… Continue reading trickbot via fake Scotia Bank Incoming Wire Name and Account Mismatch

More Formbook via complicated download chain

A bit of  a complicated and difficult to follow malware campaign this afternoon. It all starts with a typical malspam email pretending to be a new order with a word doc attachment. This involves various Microsoft Equation editor exploits in the chain. … Continue reading More Formbook via complicated download chain

Malspam emails overnight Monday 4 February to Tuesday 5 February 2019

Continuing with the masses of different malspam emails arriving overnight to start off this Tuesday Morning 5th February 2019 with its usual early start while I am eating breakfast. They are all typical subjects & email content and all deliver vari… Continue reading Malspam emails overnight Monday 4 February to Tuesday 5 February 2019

Ave Maria infostealer keylogger via Fake Invoice order confirmation

Ave Maria info stealer & keylogger is a relatively new malware that appeared rather suddenly towards the end  last year 2018. We don’t see much of it in UK and most examples I have heard of are from Italy and have been targeting Italian compa… Continue reading Ave Maria infostealer keylogger via Fake Invoice order confirmation

Godaddy DNS system still compromised to deliver yet another Gandgrab Ransomware campaign

Last week we reported on a fairly large scale Gandcrab ransomware campaign that was assisted in delivery via a security hole in Godaddy (and almost certainly other major DNS providers). Some of the major tech sites reported on the DNS compromise with a… Continue reading Godaddy DNS system still compromised to deliver yet another Gandgrab Ransomware campaign