Collaborate Disseminate
The next in the never ending series of Locky downloaders is an email with the subject of Temporarily blocked coming as usual from random companies, names and email addresses with a random named zip attachment containing a .JS file They use email … Continue reading →
Continue reading Your Debit Card is temporarily blocked malspam delivers Locky
A slightly different phishing attempt this morning. It was sent to a webmaster address on a small charity that I run the website for, so luckily hasn’t got through to the overworked staff who are less than technically aware and … Continue reading →
Continue reading Help Desk Scheduled Maintenance & Upgrade – phishing
I woke up to another overnight mass malspam run of the never ending series of Locky downloaders with a series of blank / empty emails with the basic subject of Bill for documents 57608-28-09-2016 pretending to come from from no reply @ random … Continue reading →
Continue reading Bill for documents 57608-28-09-2016 malspam delivers Locky – Odin
The next in the never ending series of Locky downloaders is an email with the subject of Neopost documents 0000888121970 coming as usual from random companies, names and email addresses with a random named zip attachment containing a WSF file . The … Continue reading →
Continue reading Neopost documents 0000888121970 malspam leads to Locky – Odin version
The next in the never ending series of Locky downloaders is an email with the subject of Document No 25845584 ( random numbers) pretending to come from random names at accounts@your own email domain or company with a random … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Clients accounts coming as usual from random companies, names and email addresses with a random named zip attachment containing a wsf file. This one … Continue reading →
Heads up everybody, we have a major change this morning in what I assume is a Locky or Dridex delivery system. The files come as RTF files but each rtf file has an individual password. None of the online automatic … Continue reading →
We continue to see Java Adwind Trojans daily. Today’s example is a slight change to the delivery method from previous Malspam emails that have been using Moneyexpress.com or MoneyGram or other middle eastern money exchange bodies. This one is an … Continue reading →
We have seen a change to the Locky ransomware today. It has been very quiet today with the first malspam arriving at about 6pm UK time. When you don’t get any Locky malspam during the working day, you can almost … Continue reading →
Continue reading Locky ransomware changed. now a .odin extension
Following on from the overnight malspam run of blank emails about pictures or photos we now are receiving another set of blank / empty email with the subject of Document from Horacio ( random name) pretending to come from random … Continue reading →