Collaborate Disseminate
Following on from THIS post ( and THESE earlier ones) about Java Adwind Trojans being delivered by various financial themed emails, we are seeing a new method of distribution of the Java Adwind Trojan using these financial themed emails with … Continue reading →
Continue reading Java Adwind embedded in word doc xpress money
A blank email with the subject of Emailing: Image15.jpg [ random numbered] pretending to come from random senders at your own email domain or company with a zip attachment containing an encrypted HTA file They use email addresses and subjects that will entice a user … Continue reading →
Continue reading Emailing: Image15.jpg malspam using HTA files delivers Locky ransomware
This Morning’s first Locky ransomware delivering malspam is an email with the subject of Statement coming from random senders, companies and email addresses with a random named zip attachment containing a JavaScript file that pretends to be a financial statement. Over the last … Continue reading →
The next in the series of today’s Locky downloaders is an email with the subject of Cancellation pretending to come from random senders with a zip attachment containing a JavaScript file that pretends to be a pdf They use email addresses and subjects that … Continue reading →
Today’s Locky/ Zepto ransomware malspam emails have come steadily in waves all day long. There have been 2 distinct different subjects and themes. one pretending to be a voice message from your own email domain or company, with the second pretending … Continue reading →
The next batch of malspam emails delivering locky ransomware is a series of emails with subjects like “Hi” , “Hi There” or “Hello” coming from random names, companies and email addresses with a zip attachment containing a WSF ( Windows Scripting File) They use email addresses … Continue reading →
Continue reading “Hi” , “Hi There” , “Hello” malspam delivers Locky ransomware
Today’s first example of malspam word docs with macros delivering Locky ransomware is an email with the subject of Today’s fax pretending to come from random names at your own email domain . They are using email addresses and subjects that will scare … Continue reading →
Continue reading Today’s fax malspam word macros leads to Locky ransomware
Following on from THIS post ( and THESE earlier ones) about Java Adwind Trojans being delivered by various financial themed emails, we see a new entry to the financial themed emails with the subject of Cancel Attached Transaction pretending to come … Continue reading →
Continue reading Cancel Attached Transaction shift-sg.com supposed to lead to Java Adwind
The latest in a long line of generic emails delivering Locky ransomware is an email with the subject of Payment Receipt pretending to come from random companies and email addresses with a malicious word doc attachment They are using email addresses … Continue reading →
Continue reading Attached is the copy of your payment receipt leads to Locky ransomware
We continue to see Java Adwind Trojans daily. Today’s example is a slight change to the delivery method from previous Malspam emails that have been using Moneyexpress.com or MoneyGram or other middle eastern money exchange bodies. This one is an email with … Continue reading →
Continue reading Unclaimed Commission Report-WUBS malspam delivers Java Adwind