Collaborate Disseminate
I really wasn’t expecting any real malware to come via email this Easter Sunday, however some has arrived, just to keep us on our toes. This fake Request for 1st new order proforma invoice scam delivers luminosity link Remote Access Tool Trojan which is being heavily misused by criminal gangs … Continue reading → Continue reading Request for 1st new order proforma invoice malspam delivers luminosity link R A T
I really wasn’t expecting any real malware to come via email this Easter Sunday, however some has arrived, just to keep us on our toes. This fake Request for 1st new order proforma invoice scam delivers luminosity link Remote Access Tool Trojan which is being heavily misused by criminal gangs … Continue reading → Continue reading Request for 1st new order proforma invoice malspam delivers luminosity link R A T
We see lots of phishing attempts for email credentials. This one is yet another variation of the basic theme. It pretends to be a message from somebody that has shared documents with you on DropBoxPhoto. Following the link you get a page telling you that you can sign into dropbox … Continue reading → Continue reading Congratulations, Kindly login to view the documents on DropBox – Phishing
We continue to be plagued daily by fake financial themed emails containing java adwind or Java Jacksbot attachments. I have previously mentioned many of these HERE. We have been seeing these sort of emails almost every day and there was nothing much to update. Today’s has a slightly different subject … Continue reading → Continue reading URGENT MONEY GRAM CONFIRMATION delivers java adwind
We have all become accustomed to seeing USPS, UPS, DHL. FEDEX and all the other delivery companies being spoofed with emails pretending to be from them delivering all sorts of malware, usually via zip attachments containing JavaScript files. There have been 2 main campaigns that I have documented HERE and HERE Recently … Continue reading → Continue reading Changes to fake USPS delivery messages delivering malware
We are so used to seeing USPS, UPS, DHL. FEDEX and all the other delivery companies being spoofed and emails pretending to be from them delivering all sorts of malware, usually via zip attachments containing JavaScript files. I saw this post on Sans Security blog yesterday and expected that I … Continue reading → Continue reading More USPS delivery messages delivering mole ransomware
Today has been a mixture so far of different subjects and alleged senders. All the Word attachments, although named differently are all identical and all are trying to exploit the 0 day OLE link exploit CVE-2017-0199 that was fixed in Yesterday’s windows / Office updates from Microsoft. ( I am late … Continue reading → Continue reading CVE-2017-0199 – 0-day malware delivered by a multitude of different emails.
An email with the subject of Greetings come from a random name and email address that says it is a resume applying for employment with a malicious word doc attachment delivers malware. I don’t know exactly what this does yet, but it looks like some sort of banking Trojan or … Continue reading → Continue reading Spear phishing fake resume malspam leads to malware
The malware is coming in thick and fast today. The latest is an email with the subject of VAT Return and Payment overdue coming from HMRC Business Help and Support Emails <info@hmrccustomersupport143.top> with a malicious word doc or Excel XLS spreadsheet attachment delivers malware, probably Dridex banking Trojan Update: this appears … Continue reading → Continue reading Spoofed HMRC VAT Return and Payment overdue malspam delivers malware
Apart from all the malware and phishing emails today, we are also seeing a mass spam run of another totally illegal “pump & dump” stock tip scam. Of course these are always total scams and no one makes any money. It is illegal to take part in this sort of … Continue reading → Continue reading FDA approval is about to send this stock up fifty fold spam, pump and dump