Collaborate Disseminate
Following on from last week with an almost identical DHL malware campaign, today I am seeing yet another email pretending to be a DHL Shipment Notification with the subject of Arrival Notice For BL – 06/08/2018 / Vessel – DHL ATLAN… Continue reading Fake DHL Arrival Notice or Shipment Notice delivers malware via embedded exe files inside MP3 music files
An email with the subject of PAYMENT RECEIPT coming from Cynehen Mbakpobe <cynehenglobalcompanyltd@yahoo.com> with a zip attachment which contains some sort of keylogger. They use email addresses and subjects that will entice a user to rea… Continue reading Fake “PAYMENT RECEIPT” delivers some sort of Keylogger
A bit of a change to the Trickbot delivery system today with this email containing the subject of “PayPal account warning” pretending to come from service@paypal.com but actually coming from “noreply@administrationservpaypal-a.tk̶… Continue reading Fake PayPal account warning delivers Trickbot
Yet another email pretending to be a DHL Shipment Notification with the subject of Shipment Notification pretending to come from DHL but actually coming from dhl@paperattention.com with a malicious word doc attachment delivers some sort of malware…. Continue reading Fake DHL Shipment Notification delivers malware
This example is an email alleging to be a customer complaint with the subject of “FW: Case 27627831 ” pretending to come from Dun & Bradstreet but actually coming from “service@dnbcomplaint.com” which is a look-a-like, typ… Continue reading Fake Dun & Bradstreet customer complaint “FW: Case 27627831 ” delivers Trickbot
This example is an email containing the subject of “I have securely shared file(s) with you” pretending to come from HSBC but actually coming from “James.Holand@hsbcbacs.co.uk” which is a look-a-like, typo-squatted or other do… Continue reading Fake HSBC “Important : Troubles processing BACs payment ” delivers Trickbot
This example is an email containing the subject of “I have securely shared file(s) with you” pretending to come from Microsoft Rights Management but actually coming from a look-a-like, typo-squatted or other domain that can easily be misid… Continue reading Fake Microsoft Rights Management “I have securely shared file(s) with you ” delivers Trickbot
The second in today’s trickbot malspam campaigns is targeted at USA rather than UK and Europe. This example is an email containing the subject of “ADP sent you a new document to sign ” pretending to come from Docusign but actually com… Continue reading Fake Docusign “ADP sent you a new document to sign” delivers Trickbot
This example is an email containing the subject of “You have a new secure mail ” pretending to come from Danske Bank but actually coming from a look-a-like or typo-squatted domain “secure@danskebankco.co.uk” with a malicious w… Continue reading Fake Danske Bank “You have a new secure mail ” delivers trickbot
This example is an email containing the subject of “Unpaid Invoice ” pretending to come from Intuit but actually coming from a look-a-like or typo-squatted domain Gary.Terry@intuit-invoice.com with a malicious word doc attachment is toda… Continue reading Fake Intuit “Unpaid Invoice ” delivers Trickbot