Author Archives: Myonlinesecurity

Another compromised tech support company server sending spam. Why you should use DMARC

Posted on by

A slightly different informational report today, that illustrates the benefits of setting up authentication correctly on your outgoing mail server and using DMARC reporting. I won’t go into DMARC  too deeply here because there are hundreds of sites explaining how to set it up and why you should use it. … Continue reading → Continue reading Another compromised tech support company server sending spam. Why you should use DMARC→

Quick warning about another set of work at home scams

Posted on by

Getting a load of work at home scams this fine Saturday afternoon. They all say that Google and Facebook have work at home opportunities. But of course there are no work at home positions with Google or Facebook. Instead these lead to a page that says earn $500 a day … Continue reading → Continue reading Quick warning about another set of work at home scams→

New Order Confirmation with recipients full details tries to deliver malware

Posted on by

I haven’t seen these new order or invoice malspams for a while now. These are particularly nasty for most recipients because they contain the recipients full details including full address, email and home & mobile phone numbers. Quite where all these correct details come from is unknown, but must be from one … Continue reading → Continue reading New Order Confirmation with recipients full details tries to deliver malware→

Spoofed Sage outdated invoice malspam delivers trickbot

Posted on by

An email with the subject of Secure email message pretending to come from Sage Invoice   but actually coming from a look-a-like domain  <noreply@sage-invoice.com>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email … Continue reading → Continue reading Spoofed Sage outdated invoice malspam delivers trickbot→

Spoofed New NatWest Bank Message delivers Trickbot banking Trojan

Posted on by

The second of today’s Trickbot malspam campaigns is an email with the subject of New NatWest Bank Message pretending to come from NatWest Bank service  but actually coming from a look-a-like domain <incoming@natwestonline270.ml> with a malicious word doc attachment is today’s latest spoof of a well known company, bank or … Continue reading → Continue reading Spoofed New NatWest Bank Message delivers Trickbot banking Trojan→

Spoofed Lloyds Bank Confidential Documents malspam delivers Trickbot banking Trojan

Posted on by

An email with the subject of Confidential Documents pretending to come from Lloyds Bank  but actually coming from a look-a-like domain <noreply@lloydsconfidential.com>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email addresses and … Continue reading → Continue reading Spoofed Lloyds Bank Confidential Documents malspam delivers Trickbot banking Trojan→

Fake HMRC via a Spoofed Docusign domain You have received a secure document via DocuSign malspam delivers trickbot

Posted on by

An email with the subject of You have received a secure document via DocuSign   pretending to come from HMRC via Docusign   but actually coming from a look alike domain  <noreply@docusign.delivery>   with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering … Continue reading → Continue reading Fake HMRC via a Spoofed Docusign domain You have received a secure document via DocuSign malspam delivers trickbot→

Yet another Spoofed HM Revenue & Customs Secure Communication malspam delivering Trickbot banking trojan

Posted on by

An email with the subject of Secure Communication pretending to come from HM Revenue & Customs  but actually coming from a look alike domain < Secure.Communication@hrmccommunication.co.uk > with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are … Continue reading → Continue reading Yet another Spoofed HM Revenue & Customs Secure Communication malspam delivering Trickbot banking trojan→

New PowerShell ransomware coming in malspam emails pretending to be email bounce messages

Posted on by

We were notified of a new ransomware version last night. This new  version comes as an email attachment which is a zip inside a zip before extracting to a .js file  in a fake Delivery Status Notification,  failed to deliver email bounce message. The .js file in the email attachment is a  PowerShell … Continue reading → Continue reading New PowerShell ransomware coming in malspam emails pretending to be email bounce messages→

This eBay member has a question regarding your item for sale phishing scam

Posted on by

I haven’t seen these fake eBay scams for long time, so was quite surprised to see one today. They don’t come from eBay and are a phishing attempt to get your eBay sign in details. The email looks like: From: member@ebay.com Date: Sat 08/07/2017 13:24 Subject: This eBay member has … Continue reading → Continue reading This eBay member has a question regarding your item for sale phishing scam→