Collaborate Disseminate
The next in the never ending series of Locky downloaders is an email with the subject of Wrong tracking number coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with tracking_number_ containing … Continue reading →
Continue reading malspam email Wrong tracking number delivers Locky
The next in the never ending series of malware delivery emails is an email with the subject of BANK SLIP coming as usual from what looks like random companies, names and email addresses with a zip attachment that contains some … Continue reading →
Continue reading malspam email BANK SLIP delivers unknown malware
An email with the subject of Payment has been made -9999 ( random number) pretending to come from random names @ random companies with a malicious word doc attachment delivers Trickbot banking Trojan. Trickbot is the successor to Dyre / Dyreza banking Trojan … Continue reading →
Continue reading malspam email Payment has been made delivers Trickbot banking Trojan
Some videos of typical tech support scams Note: these only stream in the following browsers: Internet Explorer, Edge ( W10) or Firefox. They will not stream in Chrome ( click the download link, save to your computer and open in … Continue reading →
A slightly unusual email with the subject of Important – New fax received pretending to come from Administrator <Administrator@internalfax.net> or Administrator <Administrator@internalfax.com> with either a malicious word doc attachment or a zip file containing a .js file which downloads Trickbot … Continue reading →
Continue reading Important – New fax received malspam delivers Trickbot banking trojan
A contact sent me a few word docs that have been received in what appeared to be quite closely targeted attacks against his infrastructure. I do not have the emails so I cannot comment on the effectiveness of the delivery … Continue reading →
Continue reading Dridex delivered via lnk files in embedded ole objects in word docs
The next in the never ending series of Locky downloaders is an email with the subject of Payment history coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with payment_history containing a … Continue reading →
Continue reading Payment history malspam delivers Locky thor version
An email with the subject of Document from random name pretending to come from random name <random.name@victim domain.tld> with a malicious word doc attachment delivers a trickbot banking Trojan ( the successor to Dyre) . This uses a somewhat complicated method of delivery to … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Please review coming as usual from random companies, names and email addresses with a semi-random named /numbered zip attachment starting with payment_PDF_ containing … Continue reading →
Continue reading Please review malspam delivers Locky thor version
The next in the never ending series of Locky downloaders is a blank email with the subject of Receipt 1578-92517 ( random numbers) once again pretending to come from random names at Gmail.com with a semi-random named/ numbered zip attachment matching … Continue reading →
Continue reading blank email Receipt malspam delivers locky thor version