Author Archives: Myonlinesecurity

Spoofed John Miller invoice pretending to come from somebody named Holmes delivers Dridex banking Trojan

Posted on by

Continuing with the latest series of emails with  random numbered pdf attachments that drops a malicious macro enabled word doc is an email with the subject of Invoice  pretending to come from a random first name Holmes at random email addresses  but the body of the email imitates John Miller … Continue reading → Continue reading Spoofed John Miller invoice pretending to come from somebody named Holmes delivers Dridex banking Trojan→

Re: Commercial Invoice & PL malspam delivers Loki bot

Posted on by

Continuing with the never ending series of malware downloaders is an email with the subject of Re: Commercial Invoice & PL coming or pretending to come from Panida G. (bow) <info@mastersecurityuae.com>  These tend to use random spoofed or made up companies, names and email addresses.  with a zip attachment  which delivers Loki … Continue reading → Continue reading Re: Commercial Invoice & PL malspam delivers Loki bot→

More Dridex banking Trojan delivered via pdf Message from KM_C224e pretending to come from copier at your own email address

Posted on by

Continuing with the latest series of emails with pdf attachments that drops a malicious macro enabled word doc is a blank / empty  email with the subject of Message from KM_C224e pretending to come from copier at your email address that delivers Dridex banking Trojan They are using email addresses … Continue reading → Continue reading More Dridex banking Trojan delivered via pdf Message from KM_C224e pretending to come from copier at your own email address→

fake invoice drops word docm with macros delivers Dridex banking Trojan

Posted on by

Continuing with the latest series of emails with pdf attachments that drops a malicious macro enabled word doc is an email with the subject of Invoice INV-0790 ( random numbers) pretending to come from random names  and  email address that delivers Dridex banking Trojan They are using email addresses and … Continue reading → Continue reading fake invoice drops word docm with macros delivers Dridex banking Trojan→

Fake HMRC Final payment request malspam delivers Sharik / Smoke Trojan

Posted on by

An email with the subject of Final payment request pretending to come from HMRC  Lucy.Dawson@hmrc.gsi.gov.uk  but actually coming from a look alike domain <helpdesk@notificationshmrc146.top>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Sharik / Smoke Trojan They are using email … Continue reading → Continue reading Fake HMRC Final payment request malspam delivers Sharik / Smoke Trojan→

Fake FedEx USPS UPS delivery notifications continue to deliver Kovter and ransomware

Posted on by

The gangs spreading malware via the “cannot deliver your parcel notifications” or “check where your parcel is”  spoofing FedEx, DHL, UPS, USPS etc. have changed delivery method. The emails are still very similar to the ones we are used to seeing with this sort of subject line. USPS issue #06914074: unable to delivery parcel Parcel #006514814 shipment problem, please review USPS parcel #3150281 delivery problem … Continue reading → Continue reading Fake FedEx USPS UPS delivery notifications continue to deliver Kovter and ransomware→

Fake FedEx USPS UPS delivery notifications continue to deliver Kovter and ransomware

Posted on by

The gangs spreading malware via the “cannot deliver your parcel notifications” or “check where your parcel is”  spoofing FedEx, DHL, UPS, USPS etc. have changed delivery method. The emails are still very similar to the ones we are used to seeing with this sort of subject line. USPS issue #06914074: unable to delivery parcel Parcel #006514814 shipment problem, please review USPS parcel #3150281 delivery problem … Continue reading → Continue reading Fake FedEx USPS UPS delivery notifications continue to deliver Kovter and ransomware→

Fake flash player alerts from legitimate websites

Posted on by

Regardless of how up to date our computers are, How good our Antivirus protection is, we all are at risk from malicious adverts on webpages. Now I accept adverts are part of the web today. I personally don’t use or recommend ad blockers because many websites ( including this one) … Continue reading → Continue reading Fake flash player alerts from legitimate websites→

fake clothing order Berhanu (PURCHASE DEPARTMENT) using winace files delivers Loki bot

Posted on by

Continuing with the never ending series of malware downloaders is an email with the subject of RE: CLOTHING ORDER coming or pretending to come from Berhanu (PURCHASE DEPARTMENT) <berhanukb@mail.com>  with an attachment named CLOTHES & GARMENT ORDER JUNE 2017.ace Aace files are a different form of compressed archive ( zip file ) that needs special … Continue reading → Continue reading fake clothing order Berhanu (PURCHASE DEPARTMENT) using winace files delivers Loki bot→

Fake / Spoofed HM Land Registry Notification of direct debit of fees delivers malware

Posted on by

An email with the subject of Notification of direct debit of fees pretending to come from HM Land Registry   but actually coming from a look alike domain <noreply.efees@landregistrygov160.top>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering malware. in today’s case … Continue reading → Continue reading Fake / Spoofed HM Land Registry Notification of direct debit of fees delivers malware→