Collaborate Disseminate
We see lots of phishing attempts for email credentials. This one is slightly different than many others. It pretends to be a message saying log in to Google Drive to get some documents that have been sent to you They use email addresses and subjects that will entice a user … Continue reading → Continue reading IMPORTANT DOCUMENT !!! – Google Drive email credential Phishing scam
Today has been really busy with a constant stream of malware emails coming from the Necurs botnet delivering either Trickbot banking Trojan or Jaff ransomware. They also found time to send a mass pump & dump stock spam campaign. They have used a variety of subjects including: Invoice PIS2295808 ( random … Continue reading → Continue reading A busy day with necurs botnet mass malspamming multiple Trickbot campaigns and Jaff ransomware thrown into the mix
Still sticking with Japanese malspams downloaders delivering or trying to deliver Ursnif /Gozi / ISFB banking Trojan is yet another email with the subject of Re: [お振込口座変更のご連絡 Re: [Notice of transfer account change , pretending to come from random Japanese email addresses with a malicious word doc attachment that contains … Continue reading → Continue reading another ursnif attempt from Japanese language malspam using ole objects
Continuing with the never ending series of malware downloaders is an email with the subject of Invoice PIS0120650 ( random numbers) coming or pretending to come from NoReplyMailbox @ random companies, names and email addresses with a zip attachment which matches the subject , that contains another zip file, containing a WSF file which eventually … Continue reading → Continue reading more invoice malspam delivers malware using wsf files
Yet another in the never ending series of Japanese language malspam malware downloaders delivering Ursnif /Gozi / ISFB banking Trojan is this email with the subject of 請求書 (invoice). These emails are coming in slightly malformed and outlook doesn’t want to open them or display them properly. This might be a language … Continue reading → Continue reading more Japanese language invoice malspam delivering Ursnif
This email with the subject of URGENT REPLY AND OPEN THE ATTACHMENT!! coming or pretending to come test2@m-d-s.pl with zip attachment which actually delivers fareit password stealer Trojan at first looked like a typical 419 advanced fee fraud and indeed my spam filtering system on the mail server marked it … Continue reading → Continue reading URGENT REPLY AND OPEN THE ATTACHMENT!! malspam delivers Fareit password stealer trojan
We all see loads of spam and scams to our email addresses. Luckily most of it can be filtered or blocked. However there are a range of email addresses and domains that are generally treated as safe. That is .gov domains. Almost all countries use .gov or a variation of … Continue reading → Continue reading Kenya Environment Secretary email address & mail system compromised to send spam
We see loads of 419 scams which always ask for an advance fee somewhere down the line This one is unremarkable in itself and the only reason for mentioning it is the fact is genuinely comes from a Brunei .gov email address. .Gov domains and email addresses should always be … Continue reading → Continue reading Yet another 419 scam this time from a Brunei Gov email address
We all tend to concentrate on the new threats and forget about old still persistent threats that are still doing the rounds and obviously still infecting some users or servers. MyDoom worm has been known about since 2004 ( 13 years) and is still a common threat. I was quite … Continue reading → Continue reading Mydoom still active and spreading 13 years after first discovery
We all tend to concentrate on the new threats and forget about old still persistent threats that are still doing the rounds and obviously still infecting some users or servers. MyDoom worm has been known about since 2004 ( 13 years) and is still a common threat. I was quite … Continue reading → Continue reading Mydoom still active and spreading 13 years after first discovery