Collaborate Disseminate
The next in the never ending series of Locky downloaders is an email with the subject of Message from “CUKPR0959703” pretending to come from scanner @ your own email domain with a random named zip attachment based on todays date containing a … Continue reading →
Is it 3rd time lucky for the Locky gangs today after 2 earlier failures. The next in the never ending series of Locky downloaders is an email with the subject of Invoice INV0000385774 ( random numbers) coming as usual from random … Continue reading →
Continue reading Invoice INV0000385774 malspam delivers Locky
After the earlier broken Locky downloaders we are seeing the next in the never ending series of Locky downloaders is an email with the subject of August invoice coming as usual from random companies, names and email addresses with a … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Copy coming from random names at your own email domain with a random numbered zip attachment starting with payment slip containing a .JS file They use email addresses and … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of copies coming as usual from random companies, names and email addresses with a random named zip attachment containing 2 identical .JS files They use email … Continue reading →
Following on from THIS post earlier today which has created some discussion on Twitter amongst various InfoSec professionals, I want to expand slightly. Whether this is actually an APT ( Advanced Persistent Threat) or not is open to discussion. I … Continue reading →
Continue reading Is it an APT or just another everyday malware attack
An email with the subject of ExxonMobile Introduction Letter pretending to come from Rex W. Tillerson <rextillerson@exxonmobil.com> with a malicious Microsoft publisher attachment is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Credit card receipt coming as usual from random companies, names and email addresses with a random named zip attachment containing a .JS file They use email addresses … Continue reading →
We continue to see Java Adwind Trojans daily. Today’s example is a slight change to the delivery method from previous Malspam emails that have been using Moneyexpress.com or MoneyGram or other middle eastern money exchange bodies. This one is an email with … Continue reading →
This Twitter tweet caught my attention and I decided to look into it a bit deeper. Wake up to find that Barclays Bank Plc (.org) will be paying me £1m after winning Coca-Cola’s annual email draw! Anybody reading this would … Continue reading →