Collaborate Disseminate
We continue to be plagued daily by fake financial themed emails containing java adwind attachments. I have previously mentioned many of these HERE. We have been seeing these sort of emails almost every day and there was nothing much to … Continue reading →
An email with the subject of Final payment request pretending to come from angela.fynan@hmrc.gsi.gov.uk <info@websitesage60.us> with a malicious word doc attachment is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex … Continue reading →
Continue reading Final payment request pretending to come from HMRC delivers malware
We continue to be plagued daily by fake financial themed emails containing java adwind attachments. I have previously mentioned many of these these HERE. We have been seeing these sort of emails almost every day and there was nothing much … Continue reading →
Continue reading Did you authorize any wire transfer to our account malspam delivers java adwind
The next in the never ending series of malware downloaders is an email with a variety of subjects along the lines of Form Sydnee I. Hahn ( initial word is either Form / Token / License / Certificate or other similar word followed … Continue reading →
Continue reading Dridex delivered via random subjects with cab files
We all complain about malware and phishing sites and wonder why it takes so long to take them down / remove the content. Many independent researchers have extreme problems reporting abuse to many registrars and hosting companies. In the same … Continue reading →
Continue reading Problems reporting abuse to registrars and hosting companies
We continue to see Java Adwind Trojans daily. Today’s example is yet another change to the delivery method from previous Malspam emails that have been using Moneyexpress.com or MoneyGram or other middle eastern money exchange bodies. This one is an … Continue reading →
Continue reading FedEx unable to deliver your parcel leads to Java Adwind
The next in the never ending series of Locky downloaders is an email with the subject of wrong paychecks coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with paychecks_ containing a .JS file They use … Continue reading →
Continue reading wrong paychecks malspam delivers Locky / Odin
The next in the never ending series of Locky downloaders is an email with the subject of Your Ordercoming as usual from random companies, names and email addresses with a semi-random named zip attachment starting order_details_ containing a .JS file starting … Continue reading →
The overnight malspam run in the never ending series of Locky downloaders is an email with the subject of Invoice-036124-84278204-867-7F6594 [random characters & numbers] coming as usual from random companies, names and email addresses with a semi-random named word doc. This … Continue reading →
Continue reading Random invoices malspam with word doc attachment delivers Locky
The next in the never ending series of Locky downloaders is an email with the subject of Cancellation request coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with Cancellation_Form_ containing a … Continue reading →
Continue reading Cancellation request malspam delivers Locky