PARCEL ARRIVED (Waiting Pick Up)!!! spam – Phishing

We see lots of phishing attempts for email credentials. This one is slightly different than many others and much more involved and complicated. It pretends to be a message from DHL to pickup a parcel. At first I thought, Oh look the criminals have found a new way to persuade … Continue reading → Continue reading PARCEL ARRIVED (Waiting Pick Up)!!! spam – Phishing→

massive malspam campaign delivering Ursnif banking Trojan via js files

We have been seeing a massive malspam campaign today delivering Ursnif banking Trojan via js files inside zips. There have been numerous different subjects and campaign themes I will detail some of them here: Our reference: 733092244 pretending to come from Eli Murchison <Hughchaplin@yahoo.de> Hotel booking confirmation (Id:022528) pretending to … Continue reading → Continue reading massive malspam campaign delivering Ursnif banking Trojan via js files→

massive malspam campaign delivering Ursnif banking Trojan via js files

We have been seeing a massive malspam campaign today delivering Ursnif banking Trojan via js files inside zips. There have been numerous different subjects and campaign themes I will detail some of them here: Our reference: 733092244 pretending to come from Eli Murchison <Hughchaplin@yahoo.de> Hotel booking confirmation (Id:022528) pretending to … Continue reading → Continue reading massive malspam campaign delivering Ursnif banking Trojan via js files→

fake Lloyds Bank Important BACs Documents malspam delivers Trickbot banking Trojan

An email with the subject of Important BACs Documents  pretending to come from Lloyds Bank but actually coming from a look-a-like domain  <secure@lloydsbankdocuments.com>   with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email addresses … Continue reading → Continue reading fake Lloyds Bank Important BACs Documents malspam delivers Trickbot banking Trojan→

Open the attachment to view the document malspam delivers a multitude of malware

This next malware delivery attack was sent to me by a contact, so I can alert about this one. I totally agree with him that the original email is extremely difficult to completely block ( especially in the early stages of a malspam run ) and trying to prevent users from opening … Continue reading → Continue reading Open the attachment to view the document malspam delivers a multitude of malware→

fake payment for message malspam using CVE-2017-0199 word /rtf embedded ole link exploit

An email with the subject of PAYMENT FOR YAREED [ random names)  coming from  random names and email addresses  with a malicious word doc attachment  delivers some sort of malware via the CVE-2017-0199 word /rtf embedded ole link exploit attack. If you have updated Microsoft Word with the patches to protect yourself … Continue reading → Continue reading fake payment for message malspam using CVE-2017-0199 word /rtf embedded ole link exploit→

Fake Companies House Secure email message malspam delivers Trickbot banking Trojan

An email with the subject of Secure email message pretending to come from Companies House  but actually coming from a look alike domain <noreply@cp-secure-message.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email … Continue reading → Continue reading Fake Companies House Secure email message malspam delivers Trickbot banking Trojan→

fake M.G Statement May 2017 malspam delivers java adwind

The gang delivering these Java Adwind versions are getting a bit lazy again.  The email, although shorter and less involved still spoofs the same company, pretends to come from MCB bank in Pakistan again and  delivers exactly the some version of Java Adwind as yesterday We continue to be plagued daily … Continue reading → Continue reading fake M.G Statement May 2017 malspam delivers java adwind→

New Guidelines From MoneyGram malspam delivers a brand new java Adwind version

We continue to be plagued daily by fake financial themed emails containing java adwind or Java Jacksbot attachments. I have previously mentioned many of these  HERE. We have been seeing these sort of emails almost every day and there was nothing much to update. Today’s has a  slightly different subject … Continue reading → Continue reading New Guidelines From MoneyGram malspam delivers a brand new java Adwind version→

New Guidelines From MoneyGram malspam delivers a brand new java Adwind version

We continue to be plagued daily by fake financial themed emails containing java adwind or Java Jacksbot attachments. I have previously mentioned many of these  HERE. We have been seeing these sort of emails almost every day and there was nothing much to update. Today’s has a  slightly different subject … Continue reading → Continue reading New Guidelines From MoneyGram malspam delivers a brand new java Adwind version→