Collaborate Disseminate
The next in today’s Dridex downloaders is an email with a subject saying something like “Emailing: PIC9744891.JPG” ( random numbers and file extensions. Either Gif, JPG, Tiff, Png or any other image or doc file extension). They all come from random senders. The zip attachment extracts to another zip file … Continue reading → Continue reading Emailing: PIC9744891.JPG malspam delivers Dridex
An email with the subject of pretending to come from random companies with a zip file that extracts to another zip that eventually extracts to malicious word doc attachment delivers malware probably Dridex banking Trojan Currently Payload Security has a massive backlog so analysis is pending They are using email addresses … Continue reading → Continue reading Spoofed Hedley & Ellis Ltd Customer Statement malspam deliverers malware
Continuing with the never ending series of malware downloaders is an email with the subject of CEF Documents pretending to come from C.E F. with a zip attachment delivers malware . They use email addresses and subjects that will entice a user to read the email and open the attachment. A very high … Continue reading → Continue reading Spoofed City Electrical Factors Limited CEF Documents malspam delivers malware
Back to Italian Language malspam again today with an email with the subject of Invio fattura/ordine pretending to come from with a zip file containing 2 malicious word docs delivers some sort of malware . They are using email addresses and subjects that will scare or entice a user to read the email and open … Continue reading → Continue reading Invio fattura/ordine Italian malspam with embedded ole object lnk files delivers some sort of malware
Continuing with the never ending series of malware downloaders spoofing DHL is an email with the subject of DHL Delivery coming or pretending to come from DHL Express UK. These do look very realistic and if you are expecting a delivery today ( many recipients will be) you can be very easily … Continue reading → Continue reading more spoofed DHL Delivery malspam delivers malware
We see lots of phishing attempts for email credentials. This one at first glance is quite believable. It was received by one of the users on this server who runs a small company and probably wouldn’t realise that it wasn’t from me. ( He uses a tablet & mobile phone … Continue reading → Continue reading spoofed webmail alert ‘victim@victimdomain.com’ Quota Exceeded! Please Add Now – Phishing
We continue to be plagued daily by fake financial themed emails containing java adwind or Java Jacksbot attachments. I have previously mentioned many of these HERE. We have been seeing these sort of emails almost every day and there was nothing much to update. The second of today’s malspam emails … Continue reading → Continue reading Spoofed Western Union AWD09678 MTCN 18 / Funds Verification on 1/4/2017 delivers java adwind
We continue to be plagued daily by fake financial themed emails containing java adwind or Java Jacksbot attachments. I have previously mentioned many of these HERE. We have been seeing these sort of emails almost every day and there was nothing much to update. Today’s has a slightly different subject … Continue reading → Continue reading Spoofed Bank of The Bahamas International Notification Of Funds Transfer delivers java adwind
We are starting to see a lot of malspam emails with password protected word doc attachments. They come with various subjects and themes, but they all contain genuine information about the recipient. Some like this one, only have the recipients full Name, Address and email address but some also contain genuine … Continue reading → Continue reading malspam with your full private details with password protected word docs delivering malware
All domain holders will get no end of spam and scams sent to their domain. A favourite scam is to tell the domain holder that his domain name is about to expire. However if you read very closely in the small print at the bottom of the email ( deliberately made just … Continue reading → Continue reading yet another whois registration International Whois Protection Agency scam