fake Royal Bank of Scotland Important BACs documents malspam delivers Trickbot banking Trojan

An email with the subject of FW: Important BACs documents  pretending to come from Royal Bank of Scotland but actually coming from a look-a-like domain  <Secure.Delivery@rbsdocs.co.uk>   with a link to malicious zip attachment containing a .js file  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot … Continue reading → Continue reading fake Royal Bank of Scotland Important BACs documents malspam delivers Trickbot banking Trojan→

Attached is the payment malspam delivers java adwind

We continue to be plagued daily by fake financial themed emails containing java adwind or Java Jacksbot attachments. I have previously mentioned many of these  HERE. We have been seeing these sort of emails almost every day and there was nothing much to update. Today’s has a  slightly different subject … Continue reading → Continue reading Attached is the payment malspam delivers java adwind→

Express Mail Service (EMS) fake invoice with Japanese language content malspam delivers banking Trojan

Continuing with the never ending series of Japanese language malspam malware downloaders  that normally deliver Ursnif /Gozi / ISFB banking Trojan is yet another email with the subject of Express Mail Service (EMS) with an XLS attachment with embedded  macros. Quite unusually for this gang, all the versions we have received so … Continue reading → Continue reading Express Mail Service (EMS) fake invoice with Japanese language content malspam delivers banking Trojan→

Express Mail Service (EMS) fake invoice with Japanese language content malspam delivers banking Trojan

Continuing with the never ending series of Japanese language malspam malware downloaders  that normally deliver Ursnif /Gozi / ISFB banking Trojan is yet another email with the subject of Express Mail Service (EMS) with an XLS attachment with embedded  macros. Quite unusually for this gang, all the versions we have received so … Continue reading → Continue reading Express Mail Service (EMS) fake invoice with Japanese language content malspam delivers banking Trojan→

More faked e-fax messages spoofing Nest pensions delivers malware

Following on from THIS fake / spoofed eFax message from 1 month ago, the same gang are using a similar range of fake e-faxcorporatexxx.top domains to send these malspam emails. Today’s comes  with the usual typical subject of eFax message from “0300 200 3822” – 2 page(s)   coming from eFax <message@e-faxcorporate102.top>  with … Continue reading → Continue reading More faked e-fax messages spoofing Nest pensions delivers malware→

Fake Bank of America The wire request is unsuccessful! malspam delivers Chthonic banking Trojan

An email with the subject of The wire request is unsuccessful!  pretending to come from Billing Support using random senders & email addresses  with a malicious word doc attachment  delivers Chthonic banking trojan They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. … Continue reading → Continue reading Fake Bank of America The wire request is unsuccessful! malspam delivers Chthonic banking Trojan→

Fake Bank of America The wire request is unsuccessful! malspam delivers Chthonic banking Trojan

An email with the subject of The wire request is unsuccessful!  pretending to come from Billing Support using random senders & email addresses  with a malicious word doc attachment  delivers Chthonic banking trojan They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. … Continue reading → Continue reading Fake Bank of America The wire request is unsuccessful! malspam delivers Chthonic banking Trojan→

Spoofed Nat West Bank Customer message malspam delivers banking Trojan

The second of today’s malspam runs delivering banking Trojans is an email with the subject of Customer message pretending to come from Nat West Bank  but actually coming from a series of look alike domains NatWest Bank Plc <alert@natwest-serv478.ml>  with a malicious word doc attachment  is today’s latest spoof of a well … Continue reading → Continue reading Spoofed Nat West Bank Customer message malspam delivers banking Trojan→