Author Archives: Myonlinesecurity

Fake Bankwest – You have a new eStatement mass malspam delivers Trickbot Banking Trojan

Posted on by

The next in the never ending series of Trickbot banking Trojan  downloaders is an email with the subject of  Bankwest – You have a new eStatement pretending to come from Bankwest <bob.mailbox@bankwest.com.au> They use email addresses and subjects that will entice a user to read the email and open the attachment. Bankwest … Continue reading → Continue reading Fake Bankwest – You have a new eStatement mass malspam delivers Trickbot Banking Trojan→

Update your Absa Account to avoid suspension – Phishing

Posted on by

We see lots of phishing attempts. I don’t often see Absa bank phishing in UK They use email addresses and subjects that will entice, persuade, scare or shock a recipient to read the email and open the attachment. Remember many email clients, especially on a mobile phone or tablet, only show the … Continue reading → Continue reading Update your Absa Account to avoid suspension – Phishing→

Locky delivered by more fake invoices pretending to come from your own email address

Posted on by

The next in the never ending series of Locky downloaders is an email with the subject of  Emailed Invoice – 091088 pretending to come from random names at your own email address or company domain. They use email addresses and subjects that will entice a user to read the email and open the … Continue reading → Continue reading Locky delivered by more fake invoices pretending to come from your own email address→

Locky delivered by fake “Microsoft Store E-invoice for your order” emails

Posted on by

The next in the never ending series of Locky downloaders is an email with the subject of  Microsoft Store E-invoice for your order #7833846815 ( random numbers)   pretending to come from do_not_reply @ various subdomains at Microsoft.com.  This campaign started at approx. 10pm UK time last night and continued steadily … Continue reading → Continue reading Locky delivered by fake “Microsoft Store E-invoice for your order” emails→

Trickbot delivered via fake eFax messages

Posted on by

An email with the subject of eFax pretending to come from EFax but actually coming from a whole range of look-a-like domains and for some strange reason today they are also coming from spoofed servicepaypal and NatWest domains with a malicious word doc attachment is today’s latest spoof of a well-known … Continue reading → Continue reading Trickbot delivered via fake eFax messages→

Fake FreeFax From:1707075536 delivers Locky ransomware

Posted on by

The next in the never ending series of Locky downloaders is an email with the subject of  FreeFax From:1707075536 (random numbers) pretending to come from fax@freefaxtoemail.net. Other spoofed senders include: faxes@freefaxtoemail.net no-reply@freefaxtoemail.net msg@freefaxtoemail.net message@freefaxtoemail.net They use email addresses and subjects that will entice a user to read the email and open the … Continue reading → Continue reading Fake FreeFax From:1707075536 delivers Locky ransomware→

Fake FreeFax From:1707075536 delivers Locky ransomware

Posted on by

The next in the never ending series of Locky downloaders is an email with the subject of  FreeFax From:1707075536 (random numbers) pretending to come from fax@freefaxtoemail.net. Other spoofed senders include: faxes@freefaxtoemail.net no-reply@freefaxtoemail.net msg@freefaxtoemail.net message@freefaxtoemail.net They use email addresses and subjects that will entice a user to read the email and open the … Continue reading → Continue reading Fake FreeFax From:1707075536 delivers Locky ransomware→

Another fake New Secure Message Royal Bank of Scotland delivers Trickbot banking trojan

Posted on by

An email with the subject of New Secure Message Royal Bank of Scotland pretending to come from Royal Bank of Scotland but actually coming from a whole range of look-a-like domains with a malicious word doc attachment is today’s latest spoof of a well-known company, bank or public authority delivering … Continue reading → Continue reading Another fake New Secure Message Royal Bank of Scotland delivers Trickbot banking trojan→

Trickbot banking Trojan delivered by spoofed Canadian Imperial Bank of Commerce messages

Posted on by

An email with the subject of Canadian Imperial Bank of Commerce  pretending to come from CIBC but actually coming from a  whole range of look-a-like domains and for some strange reason today they are also coming from spoofed eFax and NatWest domains  with a malicious word doc attachment  is today’s latest spoof of … Continue reading → Continue reading Trickbot banking Trojan delivered by spoofed Canadian Imperial Bank of Commerce messages→

Fake eBay invoice delivers Locky ransomware

Posted on by

The next in the never ending series of Locky downloaders is an email with the subject of  Your invoice for eBay purchases (83998749832384616#) [random numbers]  pretending to come from eBay <ebay@ebay.us> We are also seeing these pretending to come from all the other main English speaking eBay domains ebay@ebay.com.au ebay@ebay.co.uk ebay@ebay.com … Continue reading → Continue reading Fake eBay invoice delivers Locky ransomware→