Collaborate Disseminate
The next in the never ending series of Locky downloaders is an email with the subject of complaint letter coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with complaint_letter_ containing a WSF file … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Refund pretending to come from various randomly chosen delivery, parcel or postal companies with a semi random named zip attachment starting with refund containing a WSF … Continue reading →
The first of this morning’s malspam in the never ending series of Locky downloaders is a blank email with the subject of Bill for parcel 064983-04-10-2016 pretending to come from no-reply @ random email addresses with a random named zip attachment … Continue reading →
Continue reading Bill for parcel 064983-04-10-2016 malspam delivers Locky – Odin
The next in the never ending series of Locky downloaders is an email with the subject of Voicemail from [random name] [random number] <[random number]> [random time] pretending to come from voicemailandfax@ random email addresses with a semi-random named zip attachment containing a HTA … Continue reading →
Tonight’s big malspam run in the never ending series of Locky downloaders is an email with the subject of Travel Itinerary pretending to come from random airline companies with a semi- random named zip attachment starting with Travel_Itinerary containing a WSF file They use … Continue reading →
Continue reading Travel Itinerary from random airlines delivers Locky
Loads and loads of Locky today. We are seeing multiple subjects, emails and attachments. We are seeing XLS files and the typical .wsf files inside zips They use email addresses and subjects that will entice a user to read the email … Continue reading →
This one is somewhat different to the Locky downloader I posted about at the end of last week. An email with the subject of Undelivered Parcel With DHL pretending to come from Ida MIROIR <Ida.MIROIR@umons.ac.be> with a html attachment which when … Continue reading →
Continue reading even more DHL cannot deliver your parcel malspam delivers malware
The next in the never ending series of Locky downloaders is an email pretending to be a DHL cannot deliver message with the subject of Parcel details coming as usual from random companies, names and email addresses with a semi- random named … Continue reading →
Continue reading another DHL cannot deliver your parcel malspam delivers Locky
The Locky ransomware malware gang appear to be copying Dridex this week and going back to using word docs with embedded macros to deliver the ransomware. The next in the never ending series of Locky downloaders is a blank empty … Continue reading →
Continue reading random Receipt pretending to come from Gmail addresses delivers Locky – Odin
We continue to see Java Adwind Trojans daily. Today’s example is a slight change to the delivery method from previous Malspam emails that have been using Moneyexpress.com or MoneyGram or other middle eastern money exchange bodies. This one is an … Continue reading →
Continue reading new order Claudia Schmiesing delivers Java Adwind