Collaborate Disseminate
The next in the never ending series of Locky downloaders is an email with the subject of Wrong model coming as usual from random companies, names and email addresses with a semi random named zip attachment starting with fixed_invoice containing a … Continue reading →
The next in the never ending series of Locky downloaders is a blank empty email with a variety of subjects like scan, image, pic, doc etc. pretending to come form random names at Gmail.com with a zip attachment that matches the subject containing a … Continue reading →
Continue reading blank image, picture, doc malspam delivers Locky
Locky are definitely back into the full swing of things after their 2 week holiday. This “new” version of Locky now uses a .shit extension. They are started with .locky, then went to .zepto, then .odin and now .shit. Although … Continue reading →
Continue reading Budget forecast malspam delivers Locky with a .shit extension
The next in the never ending series of Locky downloaders is an email with the subject of Complaint letter coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with saved_letter containing a js … Continue reading →
Continue reading Complaint letter malspam delivers Locky using a shit extension
After a week or so break from the incessant Locky ransomware attacks we are seeing the next in the never ending series of Locky downloaders which is a blank / empty email with the subject of Receipt 00180-6477 ( random … Continue reading →
The next in the never ending series of malware downloaders is an email with the subject of ACH Payment Notification pretending to come from ap_vendor_pay2@bankofamerica.com with a with a random named / numbered zip attachment containing a .scr file. The icon … Continue reading →
Continue reading ACH Payment Notification malspam delivers trickbot / dyre banking Trojan
We are seeing an uptick in the FedEx ” unable to deliver” malspam emails this week. We see them daily and I don’t normally bother to post about them, because they are so common and I always get 1 or … Continue reading →
The next in the never ending series of malware downloaders is an email with the subject of Credit Note CN-81553 from Nordstrom Inc (7907) pretending to come from Accounts <message-service@post.xero.com> with a random named / numbered zip attachment containing a .scr … Continue reading →
We are all used to seeing spam sex related emails. The last couple of months has seen a mass campaign of sex mails looking very similar to these that lead to supposed dating sites, where sex or the lure of sex is … Continue reading →
I saw this tweet on twitter and decided to take a quick look at it, so I don’t have an original email or any further info where it came from. Risky Biz pal @briankrebs and the Reserve Bank of Australia … Continue reading →
Continue reading Reserve Bank of Australia looks like phishing but delivers malware