Author Archives: Myonlinesecurity

spoofed Lloyds Bank Important Account Documents malspam delivers Trickbot banking Trojan

Posted on by

An email with the subject of Important Account Documents pretending to come from Lloyds bank but actually coming from a look-a-like domain Lloyds Bank Documents <no-reply@lloydsbankdocs.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using … Continue reading → Continue reading spoofed Lloyds Bank Important Account Documents malspam delivers Trickbot banking Trojan→

another fake companies house complaint malspam delivering a banking trojan

Posted on by

An email with the subject of Company Complaint pretending to come from Companies House  but actually coming from a look-a-like domain Companies House <Web.Fillings@companieshousecomplaint.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering a banking Trojan which will either be Trickbot, … Continue reading → Continue reading another fake companies house complaint malspam delivering a banking trojan→

another fake companies house complaint malspam delivering a banking trojan

Posted on by

An email with the subject of Company Complaint pretending to come from Companies House  but actually coming from a look-a-like domain Companies House <Web.Fillings@companieshousecomplaint.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering a banking Trojan which will either be Trickbot, … Continue reading → Continue reading another fake companies house complaint malspam delivering a banking trojan→

fake invoices spreading java adwind

Posted on by

It looks like the malware gang or gangs spreading java Adwind have changed to start using fake invoices rather then their more usual  method of fake MoneyGram or Western Union money transfer reports or updates.   Many Antiviruses on Virus Total detect these heuristically. Make Note: Java Adwind  / Java Jacksbot are both very dangerous remote … Continue reading → Continue reading fake invoices spreading java adwind→

fake invoices spreading java adwind

Posted on by

It looks like the malware gang or gangs spreading java Adwind have changed to start using fake invoices rather then their more usual  method of fake MoneyGram or Western Union money transfer reports or updates.   Many Antiviruses on Virus Total detect these heuristically. Make Note: Java Adwind  / Java Jacksbot are both very dangerous remote … Continue reading → Continue reading fake invoices spreading java adwind→

spamming ransomware protection software gets you a bad reputation

Posted on by

Ransomware and other malware, especially received by email is a big threat. Stopping or alerting the recipient to the potential threat inside an email or email attachment is primary in protection. We see and hear of lots of software being heavily marketed to be a 100% protection against ransomware. Like … Continue reading → Continue reading spamming ransomware protection software gets you a bad reputation→

fake PayPal your account has been limited leads to a money making scam

Posted on by

When I received this email, I thought it was another badly done PayPal phishing attempt. At first glance it looks like it with a typical email that doesn’t have any of the PayPal logos or imprint details. I probably get 10 or 15 PayPal phishing attempts every day. But no! it is … Continue reading → Continue reading fake PayPal your account has been limited leads to a money making scam→

Tesco Bank Second contact attempt – Re-activate Your Account – Phishing

Posted on by

We have received a couple of these  phishing emails today both pretending to come from Tesco Bank trying to get not only your bank details but loads of other information about you that can be used to totally steal your identity as well as all your money. These are  slightly better done … Continue reading → Continue reading Tesco Bank Second contact attempt – Re-activate Your Account – Phishing→

Spoofed Royal mail Your parcel has been shipped today malspam delivers what looks like new Cerber

Posted on by

Continuing with the never ending series of malware downloaders is an email with the subject of Your parcel has been shipped today  pretending to come from Royal Mail with zip attachment in the format recieptTN880209824GB6.zip which matches the normal tracking numbers that Royal Mail do use. This delivers an unknown malware at this time. … Continue reading → Continue reading Spoofed Royal mail Your parcel has been shipped today malspam delivers what looks like new Cerber→

Japanese language malspam currently spreading different banking Trojans

Posted on by

Just a very quick short post about the Japanese language malspam currently spreading different banking Trojans. Today they are back to malicious macros inside  Excel XLS  files. I am seeing 2 different versions of the xls attachments so far today with numerous different emails, subjects and body content. All the … Continue reading → Continue reading Japanese language malspam currently spreading different banking Trojans→