Author Archives: Myonlinesecurity

New Secure Message Royal Bank of Scotland delivers Trickbot banking Trojan

Posted on by

An email with the subject of New Secure Message Royal Bank of Scotland pretending to come from RBS  but actually coming from a look-a-like domain RBS bankline secure email <noreply@rbsbankline##.ml>   with a malicious word doc attachment  is today’s latest spoof of a well-known company, bank or public authority delivering Trickbot banking Trojan. … Continue reading → Continue reading New Secure Message Royal Bank of Scotland delivers Trickbot banking Trojan→

Account Deactivation Alert – email account credentials Phishing

Posted on by

We see lots of phishing attempts for email credentials. The email for this one is nothing very special or unusual. It pretends to be a message from the Mail Administrator saying your account is scheduled for de-activation and you should log in & cancel the de-activation if you didn’t request … Continue reading → Continue reading Account Deactivation Alert – email account credentials Phishing→

Fake Dropbox Please verify your email address delivers Locky ransomware

Posted on by

We are seeing a run of a very different Locky delivery email tonight. This only seems to work properly in Google Chrome, Firefox gives a simple download file box and  Internet Explorer gives error messages on clicking the  “click here” link. This means that Internet Explorer users will be safe … Continue reading → Continue reading Fake Dropbox Please verify your email address delivers Locky ransomware→

Fake Santander Bank Important – New Account Documents delivers Trickbot banking Trojan

Posted on by

An email with the subject of Important – New Account Documents pretending to come from Santander Bank  but actually coming from a look-a-like domain Santander <account.documents@santanderdoc.co.uk> or Santander <account.documents@santandersec.co.uk>   with a malicious word doc attachment  is today’s latest spoof of a well-known company, bank or public authority delivering Trickbot banking Trojan … Continue reading → Continue reading Fake Santander Bank Important – New Account Documents delivers Trickbot banking Trojan→

Trickbot banking Trojan continues to be delivered by spoof NatWest bank messages

Posted on by

The Trickbot gang have got a bit lazy today and continued with imitating NatWest Bank and using the same look-a-like domain as yesterday’s version. But using a slightly different email message. They have even re-used the same domains to deliver the actual payload, but with different file names. An email … Continue reading → Continue reading Trickbot banking Trojan continues to be delivered by spoof NatWest bank messages→

Fake Your Sage subscription invoice is Due delivers malware

Posted on by

An email with the subject of Your Sage subscription invoice is Due pretending to come from Sage but actually coming from a look-a-like domain SAGE UK <message@sagemailsupport14.top>  with a malicious word doc attachment  is another one of today’s  spoofs of a well-known company, bank or public authority delivering what I think … Continue reading → Continue reading Fake Your Sage subscription invoice is Due delivers malware→

Fake “Your latest BT OneBill is available now” malspam leads to Dridex banking trojan

Posted on by

An email with the subject of Your latest BT OneBill is available now  pretending to come from BT  but actually coming from a different domain ebilling4business@btdnet.com   that can just about be mistaken for  a genuine BT email address is today’s latest spoof of a well-known company, bank or public authority delivering Dridex banking Trojan … Continue reading → Continue reading Fake “Your latest BT OneBill is available now” malspam leads to Dridex banking trojan→

Fake “Your latest BT OneBill is available now” malspam leads to Dridex banking trojan

Posted on by

An email with the subject of Your latest BT OneBill is available now  pretending to come from BT  but actually coming from a different domain ebilling4business@btdnet.com   that can just about be mistaken for  a genuine BT email address is today’s latest spoof of a well-known company, bank or public authority delivering Dridex banking Trojan … Continue reading → Continue reading Fake “Your latest BT OneBill is available now” malspam leads to Dridex banking trojan→

More fake NatWest emails deliver Trickbot banking Trojan

Posted on by

An email with the subject of Secure email message pretending to come from NatWest bank  but actually coming from a look-a-like domain noreply@ servicemessage###.ml  with a malicious word doc attachment  is today’s latest spoof of a well-known company, bank or public authority delivering Trickbot banking Trojan. The ### is any number between … Continue reading → Continue reading More fake NatWest emails deliver Trickbot banking Trojan→

Fake apple E-Invoice malspam delivers Locky Ransomware

Posted on by

The next in the never ending series of Locky downloaders is an email with the subject of  E-invoice for your order #6377810026 [ random numbers]pretending to come from do_not_reply@ random Apple email addresses . the addresses I have seen include: do_not_reply@eu.apple.com do_not_reply@asia.apple.com do_not_reply@us.apple.com   They use email addresses and subjects that will … Continue reading → Continue reading Fake apple E-Invoice malspam delivers Locky Ransomware→