Collaborate Disseminate
It looks like the Japanese malspams are also trying the parking or speeding fine approach. Continuing with the never ending series of Japanese language malspam malware downloaders delivering Ursnif /Gozi / ISFB banking Trojan is yet another email with the subject of 駐禁報告書 ( Invitation Report) or (The report of the bicycle ) depending … Continue reading → Continue reading Japanese language parking violation malspam delivers Ursnif
Continuing with the latest series of emails with pdf attachments that drops a malicious macro enabled word doc is an email with the subject of Emailing: 2650032.pdf ( random numbers) pretending to come from random names at your own email address that delivers Jaff ransomware They are using email addresses and subjects … Continue reading → Continue reading pdf pretending to come from your own email address delivers jaff ransomware
Continuing with the mass of Japanese language malspam delivering Ursnif /Gozi / ISFB banking Trojan is yet another email with the subject of 保安検査 ( Security Check) pretending to come from with a malicious word doc attachment that contains embedded ole objects where you have to manually click on the blurry … Continue reading → Continue reading Even more Japanese language malspam delivering Ursnif banking trojan
Continuing with the never ending series of malware downloaders is an empty / blank email with the subject of Re: invoice 28769 coming or pretending to come from random companies, names and email addresses with a semi-random named zip attachment that contains another zip that in turn contains a .js file They … Continue reading → Continue reading blank email with fake invoice attachment tries to deliver malware
I must be missing something in the auto translation of this Japanese Language malspam which just doesn’t make a lot of sense when translated. I think it pretends to be a cancellation for renting a parking lot in Japan somewhere that will take place on 1 June which delivers Ursnif … Continue reading → Continue reading Japanese language malspam Parking lot rental cancellation delivers more ursnif banking Trojan
One of the big questions that I keep being asked about Wannacry / Wannacrypt0r ransomware worm is why is it only ( mainly) attacking big business, Public Authorities like the NHS in UK and Industry like Nissan and Renault. Why isn’t it affecting consumers ( home users and small business) … Continue reading → Continue reading Why the Wannacry, Wannacrypt0r worm affected mainly big business and the NHS
An email with the subject of You have received an encrypted email pretending to come from Lloyds bank but actually coming from a look alike domain SecureMessage@lloydssecuremessage.co.uk with a malicious word doc attachment is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They … Continue reading → Continue reading Fake Lloyds bank You have received an encrypted email delivers trickbot
An email pretending to be an invoice coming from random senders with a PDF attachment that drops a malicious macro enabled word doc that should deliver some sort of malware This looks like a continuation of last week’s big malspam run that delivered a new ransomware Jaff ransomware but at this time because … Continue reading → Continue reading more fake invoice malspam with pdf attachments deliver malware
Continuing with the never ending series of malware downloaders is a Japanese language malspam email with the subject of 予約完了[るるぶトラベル] (Reservation complete [Ruu Travel]) pretending to come from support@rurubu.travel with a zip attachment with a Japanese character set name which delivers ursnif / Gozi / ISFB banking Trojan. We are also seeing these … Continue reading → Continue reading Japanese language spoofed travel reservation and invoice malspam delivers Ursnif banking Trojan
Back to Parking /and Speeding fines today with the never ending series of malware downloaders is an email with the subject of Report-ID: submit@thespykiller.co.uk 21/04/2017 coming or pretending to come from Parking Service ( random email addresses ) with a zip attachment which delivers Kovter and HydraCrypt malwares. These parking / speeding fines … Continue reading → Continue reading fake speeding tickets deliver multiple malwares