here is the invoice from September 2016 malspam delivers Locky

The Locky gang are getting sloppy and lazy. Instead of a new version of the malware they have reissued the same attachment’s ( although renamed) and malware payload that we described in this post last night. Today’s first malspam in the … Continue reading →

Source

Continue reading here is the invoice from September 2016 malspam delivers Locky→

SCAN ALGRAFIKA SH.P.K coming from logistics@ random companies malspam delivers Locky /Zepto

The next in today’s never ending series of Locky downloaders is an email with the subject of  SCAN  coming from  logistics@ random companies, names and email addresses  with a random named zip attachment starting with SCAN _ todays date  containing a WSF file … Continue reading →

Source

Continue reading SCAN ALGRAFIKA SH.P.K coming from logistics@ random companies malspam delivers Locky /Zepto→

financial report “somebody is urging you to get the financial report done within this week” malspam delivers Locky

Another day and yet another load of malspam emails in the never ending series of Locky downloaders with an email with the subject of  financial report coming as usual from random companies, names and email addresses  with a random named zip … Continue reading →

Source

Continue reading financial report “somebody is urging you to get the financial report done within this week” malspam delivers Locky→

Renewed License “Here is the company’s renewed business license” malspam delivers Locky

Yet another malspam  in the never ending series of Locky downloaders is an email with the subject of  Renewed License coming as usual from random companies, names and email addresses  with a random named zip attachment  containing 2 identical .WSF files … Continue reading →

Source

Continue reading Renewed License “Here is the company’s renewed business license” malspam delivers Locky→

Delivery Confirmation: 00336499 malspam coming from ship-confirm@ random companies delivers Locky/Zepto

The next in the never ending series of Locky downloaders is an email with the subject of  Delivery Confirmation: 00336499 [ random numbers] coming as usual from ship-confirm@ random companies, names and email addresses  with a random named zip attachment  containing a .JS … Continue reading →

Source

Continue reading Delivery Confirmation: 00336499 malspam coming from ship-confirm@ random companies delivers Locky/Zepto→

Account report malspam “we have detected the cash over and short in your account” delivers Locky

The next in the never ending series of Locky downloaders is an email with the subject of  Account report coming as usual from random companies, names and email addresses  with a random named zip attachment  containing 2 identical .WSF files. … Continue reading →

Source

Continue reading Account report malspam “we have detected the cash over and short in your account” delivers Locky→

payment copy malspam delivers Locky / Zepto

Yet another one in the never ending series of Locky downloaders is an email with the subject of  payment copy coming as usual from random companies, names and email addresses  with a random named zip attachment  containing a WSF file. … Continue reading →

Source

Continue reading payment copy malspam delivers Locky / Zepto→

Accounts Documentation – Invoices malspam pretending to come from CreditControl @ your own email domain delivers Locky

The next in this mornings  never ending series of Locky downloaders is an email with the subject of  Accounts Documentation – Invoices  pretending to come from  CreditControl @ your own email domain with a random named zip attachment  containing a .HTA file … Continue reading →

Source

Continue reading Accounts Documentation – Invoices malspam pretending to come from CreditControl @ your own email domain delivers Locky→