Author Archives: Myonlinesecurity

Another Spoofed HMRC Company Excel Documents delivers trickbot

Posted on by

An email with the subject of Secure email message pretending to come from HMRC  but actually coming from a look-a-like domain HM Revenue & Customs <Gary.Brooks@hrmccommunication.co.uk>   with a malicious Excel XLSM attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan. It is a … Continue reading → Continue reading Another Spoofed HMRC Company Excel Documents delivers trickbot→

Fake quotation request leads to Phishing for email credentials

Posted on by

We see lots of phishing attempts for email credentials. This one is slightly different than many others . It pretends to be a message from a company asking for a quotation. When you open the attached html file you eventually get redirected to a fake log in page. The companies … Continue reading → Continue reading Fake quotation request leads to Phishing for email credentials→

another bad 419 scam president of lybia Late Muammar Ghaddafi.

Posted on by

Another 419 scam that is so obviously wrong. At least get a speelchucker working and get the country name and the evil deceased dictator who you pretend to be stealing money from correct to have a miniscule chance of being believed. The correct country is Libya not Lybia. Gaddafi is … Continue reading → Continue reading another bad 419 scam president of lybia Late Muammar Ghaddafi.→

another bad 419 scam president of lybia Late Muammar Ghaddafi.

Posted on by

Another 419 scam that is so obviously wrong. At least get a speelchucker working and get the country name and the evil deceased dictator who you pretend to be stealing money from correct to have a miniscule chance of being believed. The correct country is Libya not Lybia. Gaddafi is … Continue reading → Continue reading another bad 419 scam president of lybia Late Muammar Ghaddafi.→

Spoofed Nationwide Secure Email – Secured Message malspam delivers Trickbot banking Trojan

Posted on by

An email with the subject of Nationwide Secure Email – Secured Message  pretending to come from Nationwide but actually coming from a look-a-like domain <secured@nationwidesecure.co.uk> with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email addresses … Continue reading → Continue reading Spoofed Nationwide Secure Email – Secured Message malspam delivers Trickbot banking Trojan→

Payment copy please ship immediately spam leads to Phishing for your email credentials

Posted on by

We see lots of phishing attempts for email credentials. This one is slightly different than many others and surprisingly creative from the phisher. It pretends to be a message saying to download a payment copy and please ship the goods they have ordered. This was sent to a small business … Continue reading → Continue reading Payment copy please ship immediately spam leads to Phishing for your email credentials→

Spoofed Vodafone Online Bill Manager – Your Phone Bill is ready to view delivers banking Trojan

Posted on by

Another big malspam campaign pretending to be a Vodafone bill. These started earlier this morning with links in the email to a compromised or fraudulently set up SharePoint business site that soon stopped delivering the malware payloads. They then quickly switched to a  whole host of other compromised sites to … Continue reading → Continue reading Spoofed Vodafone Online Bill Manager – Your Phone Bill is ready to view delivers banking Trojan→

Another spoofed HMRC You have a new secure communication malspam delivers Trickbot banking trojan

Posted on by

An email with the subject of You have a new secure communication pretending to come from HMRC  but actually coming from a look-a-like domain and email address HM Revenue & Customs <donotreply@hmrccommunication.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering … Continue reading → Continue reading Another spoofed HMRC You have a new secure communication malspam delivers Trickbot banking trojan→

fake Microsoft Voice Voicemail From 845-551-#### at 9:35AM malspam delivers Emotet banking Trojan

Posted on by

Continuing with the never ending series of malware downloaders is an email with the subject of Voicemail From 845-551-#### at 9:35AM pretending to come from Microsoft Voice <MSVoice@your own email domain> downloads Emotet banking Trojan They use email addresses and subjects that will entice a user to read the email and open … Continue reading → Continue reading fake Microsoft Voice Voicemail From 845-551-#### at 9:35AM malspam delivers Emotet banking Trojan→