Collaborate Disseminate
Locky and the other malware gangs are really getting in hard before the UK Spring Bank Holiday / USA Memorial day Holiday Weekend. I have seen dozens of different subjects so far today, ranging from documents or images pretending to come … Continue reading →
Continue reading Summons On The Case #4E459E46 delivers Locky ransomware
Yet another email in the series of Locky downloaders spoofing random companies with the subject of RE: pretending to come from random senders with a zip attachment is another one from the current bot runs which downloads what looks like Locky ransomware They use … Continue reading →
A series of email spoofing different companies with the subject of I / we have attached the [document / file /declaration ] from [random company name] coming from random senders with a malicious word doc attachment is another one from the current bot … Continue reading →
An email with the subject of You have received a new fax pretending to come from Incoming Fax <Incoming.Fax@victim domain.tld> with a zip attachment is another one from the current bot runs which delivers some malware. Edit: I am being told it … Continue reading →
Continue reading You have received a new fax from your own email address delivers malware
An email with the subject of Pan Card pretending to come from email2jbala . <email2jbala@gmail.com> with a malicious word doc attachment downloads Locky ransomware. I have never head of a PAN card and had to do a Google search to find … Continue reading →
Continue reading Attached is the PAN card as requested delivers Locky
Following on from THIS post is yet another email spoofing random companies with the subject of FW: Latest order delivery details pretending to come from random senders and email addresses with a zip attachment downloads the same malware in … Continue reading →
Continue reading FW: Latest order delivery details delivers malware via Windows PowerShell
An email with the subject of Weekly report pretending to come from random senders with a zip attachment is another one from the current bot runs which downloads some malware which is likely to be Locky ransomware. Once again the malware … Continue reading →
Continue reading Weekly report King regards spoofing random companies delivers malware
The malware bots continue to plague us with new harder to analyse versions of their downloaders today. The most recent one is an email with the subject of The invoices from UNITED UTILITIES GROUP PLC [ random companies] pretending to come … Continue reading →
Continue reading The invoices from random companies delivers malware via Windows Powershell
An email with the subject of Operational Expense pretending to come from random senders with a zip attachment is another one from the current bot runs which downloads Locky ransomware. Yet again the malware gangs are changing the encryption / obfuscation … Continue reading →
Dridex / Locky are back to the usual delivery system with an email pretending to come from Jobin Jacob at HYTEX with the subject of URGENT – DELIVERY coming come from random senders with a zip attachment downloading Locky ransomware They use email … Continue reading →
Continue reading URGENT – DELIVERY Jobin Jacob HYTEX delivers Locky