Collaborate Disseminate
Since yesterday 15 June 2016, we have been hearing about a slow but steady trickle of Locky ransomware / Dridex banking Trojan JavaScript downloaders inside zip file attachments. The first one I received on my mail server were at about 4 am UTC … Continue reading →
Continue reading Locky ransomware / Dridex banking Trojan trying to come back
A very strange one that I cannot work out if it is a phishing attempt, an attempt to deliver malware or just a cock-up by the bad guys sending it. An email in a mixture of Spanish & German language that … Continue reading →
I received, what at first glance looked like a “normal” PayPal phishing email. It looked a typical email from a clueless phisher, using one of the phishing kits, with a standard email with a HTML form attachment. OK nothing weird … Continue reading →
I have seen some clueless spammers over the years but this Chinese one who appears to be spamming himself, must take the biscuit. Like many blogs and websites we have sharing links. These allow you to share interesting or informative posts … Continue reading →
An email with the subject of Failed on delivery pretending to come from Royal Mail Team <info@footballplayers1.ga> with a zip attachments containing a malicious word doc is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans … Continue reading →
There is a lot of chat and buzz on Twitter, Facebook, private forums and mailing lists amongst security researchers and Anti-malware companies this last week. It has been extremely quiet, malware wise, with a vastly reduced, in fact almost non … Continue reading →
One of the frequent subjects in a phishing attempt is Tax returns or tax refunds , where especially in UK, you need to submit your Tax Return online. The phishers have caught on to the fact that in UK all government services … Continue reading →
Continue reading Automated tax refund notification – Phishing
An email with the subject of Spam2Ls Suspicious activity on your PayPal Account pretending to come from PayPal <service@intl.paypal.com> with a link in the email that when clicked which downloads a password stealing malware. At first, I thought this was … Continue reading →
Continue reading Spam2Ls Suspicious activity on your PayPal Account delivers malware
An email with the subject of ACH – Bank account information form pretending to come from Ali Bolton <Ali.Bolton@jpmchase.com> with a zip attachment which downloads Cerber ransomware. I haven’t seen one of these spoofed jpmchase.com / ACH emails for ages. Previously the … Continue reading →
Continue reading ACH – Bank account information form malspam delivers Cerber ransomware
Yet another really lame email from the Locky gang with the subject of Lottery Ticket #71088492 [ random numbered] pretending to come from random senders with a zip attachment which downloads Locky ransomware They use email addresses and subjects that will entice a user … Continue reading →
Continue reading Lottery Ticket #71088492 malspam leads to #Locky