British Gas invalid certificate warnings.

Like thousands or even millions of other British Gas users, I received my usual monthly email asking me to submit my meter reading . Nothing unusual in that, until I followed the link ( as usual ) and got an invalid certificate warning.  I do this every month and have … Continue reading → Continue reading British Gas invalid certificate warnings.→

More Trickbot banking Trojan delivered by fake HMRC Secure email communication malspam emails

An email with the subject of Secure email communication pretending to come from HM Revenue & Customs <GSRPCommunication@govsecure.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email addresses and subjects that will scare or entice … Continue reading → Continue reading More Trickbot banking Trojan delivered by fake HMRC Secure email communication malspam emails→

spoofed Scotiabank Secure email communication delivers Trickbot banking Trojan

An email with the subject of Secure email communication pretending to come from ScotiaBank <Secure.Mail@scotiabankmail.com> with a malicious word doc attachment  delivers what looks like Trickbot banking Trojan They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion … Continue reading → Continue reading spoofed Scotiabank Secure email communication delivers Trickbot banking Trojan→

Freelance translator from English into Russian and Ukrainian. is it a 0 day malware? or just spam

I honestly cannot tell if this is a malware attempt or just pure spam. Normally I would instantly say spam, but with all the talk about newly released and newly used exploits that shadowbrokers leaked from NSA sources, I am not prepared to immediately discount a sudden new malware attempt … Continue reading → Continue reading Freelance translator from English into Russian and Ukrainian. is it a 0 day malware? or just spam→

Another new difficult to protect against PayPal phish

We see lots of phishing attempts for PayPal login credentials . This one is slightly different than many others and much more involved and complicated. At a quick glance it looks similar to many PayPal and other financial phishing attacks with a fairly bland boiler plate email and a html … Continue reading → Continue reading Another new difficult to protect against PayPal phish→

more fake photo or fotki malspam tries to deliver malware but appears to fail

Continuing with the never ending series of malware downloaders is an email with the subject of Re: fotki or re: photo  coming or pretending to come from random companies, names and email addresses with a semi-random named zip attachment in the format of mg_0943276325764803298_JPG.zip  which tries to deliver some sort of malware but … Continue reading → Continue reading more fake photo or fotki malspam tries to deliver malware but appears to fail→

more fake photo or fotki malspam tries to deliver malware but appears to fail

Continuing with the never ending series of malware downloaders is an email with the subject of Re: fotki or re: photo  coming or pretending to come from random companies, names and email addresses with a semi-random named zip attachment in the format of mg_0943276325764803298_JPG.zip  which tries to deliver some sort of malware but … Continue reading → Continue reading more fake photo or fotki malspam tries to deliver malware but appears to fail→

fake spoofed DHL Shipment Notification delivers some sort of unknown malware

Continuing with the never ending series of malware downloaders is an email with the subject of DHL Shipment Notification : 1104749373 pretending to come from DHL Customer Support <support@dhl.com>  with a semi-random named zip attachment in the format of Pickup EXPRESS .Date2017-04-26.zip  which delivers or tries to deliver some sort of malware. This is a … Continue reading → Continue reading fake spoofed DHL Shipment Notification delivers some sort of unknown malware→

The Locky onslaught continues with blank PDF attachments containing embedded macro word docs.

Still Continuing from Last Friday’s return of Locky, overnight ( UK time) we are seeing another 2 mass malspam onslaughts with different email subjects. The first is confirmation_12345678.pdf ( random numbers) pretending to come from info@random.tld  with a PDF attachment that contains an embedded malicious word doc with macros that delivers Locky … Continue reading → Continue reading The Locky onslaught continues with blank PDF attachments containing embedded macro word docs.→