Collaborate Disseminate
Following on from this post yesterday where I missed the original payload we have an email that has a multitude of subjects all along the line of scanned file / image / document / image etc pretending to come from totally random senders with a pdf attachment. This PDF does have … Continue reading → Continue reading scanned file with pdf attachment malspam drops malicious word macro delivers malware
An email with the subject of FW: Important BACs documents pretending to come from RBS BACs <GRGBACspaymentsdelivery@rbsdocuments.co.uk> with a malicious word doc spreadsheet attachment delivers malware. At this stage I don’t know if these are they usual Dridex banking payload or the Kegotip banking malware we saw yesterday. These look like … Continue reading → Continue reading Spoofed RBS FW: Important BACs documents malspam delivers malware
At first I thought this was going to be the start of today’s malware runs, but it is only a phishing attempt against a wide ranging number of common email services. Of course this is still very serious, but you do at least have the opportunity to stop entering any … Continue reading → Continue reading Spoofed Howard Timber read your document on dropbox – phishing scam
The next in today’s “blast from the past” attempts to download malware is an email with the subject of scan data pretending to come again from noreply@your own email address But whichever apprentice is looking after the shop while the boss is on his Easter Holidays has messed up big time. … Continue reading → Continue reading scan data malspam pretending to come from noreply@ your own email address tries to deliver malware
Today is back to one of our old favourite email lures which I haven’t seen for about 18 months I have no idea why they didn’t change the date on the email template. That is a total red flag to get caught by spam filters. An email with the subject … Continue reading → Continue reading Scanned image from MX-2600N pretending to come from noreply@ your own email address delivers malware
Creating a strong password for every website that you use is the essential first step in secure online behaviour. This advice from UK Gov’t is at first glance very good advice. But it implies that you only need different secure passwords for a few important online accounts, Your email, your bank … Continue reading → Continue reading Creating and using a strong individual password for every online account.
Looks like we are back to Japanese malspam today with an email with the subject of 写真 ( photo) coming or pretending to come from random companies, names and email addresses with a semi-random named zip attachment which delivers malware which looks like Ursnif banking Trojan I don’t suppose many UK … Continue reading → Continue reading more Japanese language “photos” malspam delivers malware
The internet is buzzing with yet another 0 day exploit for Microsoft Word. Yes this one is serious and can infect you with no action on your part., if you open one of these malicious Word Documents. But lets just step back, take a deep breath and in the immortal words … Continue reading → Continue reading new Microsoft word 0 day exploit.
For a change this is about an exploit, rather than a malspam email. I was reading posts on a well known tech forum, when I got a sudden divert and a .hta file attempted to download. Of course I immediately saved the file, rather than letting it run. I won’t … Continue reading → Continue reading Fake flashplayer update via exploit using adverts on legit site
We see lots of phishing attempts for PayPal details. This one is slightly different than many others and much more involved and complicated. This one has a html attachment that contains the phishing acts. There is nothing strange in that. They ask you to give all the usual details. What … Continue reading → Continue reading Paypal Update account information – Phishing with a difference