Collaborate Disseminate
Following on from this post which gained lots of attention, I have been told about a new one today. This one fulfils our worse fears and the entire phish is performed on a website that actually is the genuine Google … Continue reading →
Continue reading Phishing via JavaScript Google this time not PayPal
I haven’t posted much this week about the continual Locky JavaScript downloaders because they quite frankly haven’t been worth bothering with. Yes, there have been quite a few of them, but they have been such generic emails with such vague subjects as … Continue reading →
Continue reading continuing with Locky delivered via Malspam
An email with the subject of Additional Order (Additional Items) pretending to come from Ahmed <Ahmed@malothgroups.com> with a java .jar which is a variant of Java Adwind Trojan. These are very nasty backdoor Remote Access, password stealers. The immense danger … Continue reading →
Continue reading Additional Order (Additional Items) malspam delivering Java Adwind backdoor Trojan
An email with the subject of New Xpress Money Certificate pretending to come from xm.ca@xpressmoney.com with a zip attachment which delivers a java jacksbot Trojan They use email addresses and subjects that will entice a user to read the email and … Continue reading →
Continue reading New Xpress Money Certificate java jacksbot Trojan
After the Brexit vote on Thursday, we are starting to see the scammers and phishers using the uncertainty, fear and doubt about the UK and the EU to scam you. The first one today is an email pretending to come from … Continue reading →
Continue reading New Barclays security update – Phishing scam
Until I received this phishing email, I had never even heard of Skrill so had to do a quick lookup to see what it was. It appears to be some sort of money transfer service and payment system. A bit … Continue reading →
An email with the subject of Fwd: Re: TT-USD78600.00 pretending to come from barat.mnupack@mnubd.com with a malicious word doc attachment is an attempt to exploit CVE-2010-3333 which is a buffer overflow in word RTF files. Anybody using a modern version of word, … Continue reading →
Continue reading Please kindly find attached your swift copy of payment malspam with RTF exploit
An email with the subject of Final version of the report pretending to come from random senders with a zip attachment containing a JavaScript file which downloads Locky Ransomware They use email addresses and subjects that will entice a user to read … Continue reading →
Continue reading Final version of the report malspam leads to #Locky ransomware
An email with the subject of Payment pretending to come from random senders with a zip attachment which downloads Locky ransomware They use email addresses and subjects that will entice a user to read the email and open the attachment. … Continue reading →
An email with the subject of On Hold Transactions From 21.06.2016 pretending to come from Saeed Abugharbieh <saeed.abugharbieh@xpressmoney.com> with a zip attachment that contains a Barys Trojan and a copy of the image in the email. The ,exe file drops a JAVA jar … Continue reading →
Continue reading On Hold Transactions From 21.06.2016 Xpress Money Services