SPAM MALWARE: Remittance Advice word doc with embedded OLE object

An email with the subject of  Remittance Advice pretending to come from Random senders and email addresses with a malicious word doc attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like … Continue reading →

Source

Continue reading SPAM MALWARE: Remittance Advice word doc with embedded OLE object→

SPAM MALWARE: Invoice 1723-812595 drops Dridex

An email with the subject of   Invoice 1723-812595 [ random numbered]  pretending to come from random senders and email addresses   with a zip attachment is another one from the current bot runs which contains what looks like the embedded Dridex binary inside the … Continue reading →

Source

Continue reading SPAM MALWARE: Invoice 1723-812595 drops Dridex→

SPAM MALWARE: Emailing: DOC 05-18-2016, 04 49 68 pretending to come from your own email address

Another email with the subject of  Emailing: DOC 05-18-2016, 04 49 68  [ random numbered]  pretending to come from  your own email address  with a zip attachment is another one from the current bot runs which downloads what is probably Dridex banking … Continue reading →

Source

Continue reading SPAM MALWARE: Emailing: DOC 05-18-2016, 04 49 68 pretending to come from your own email address→

Special offer: Buy Acronis True Image 2016 and get Kaspersky Internet Security and 4 other programs free

Special offer: Buy Acronis True Image 2016 and get Kaspersky Internet Security, CyberGhost VPN, CCleaner Pro Plus and Malwarebytes anti-malware for free. For 1 computer: Normal price £159.83 Special offer price £39.95 Offer ends 2 June 2016. Buy now and … Continue reading →

Source

Continue reading Special offer: Buy Acronis True Image 2016 and get Kaspersky Internet Security and 4 other programs free→

SPAM MALWARE: BILL Store-Nellimarla Jute Mills Co Ltd

An email with the subject of BILL pretending to come from Store-Nellimarla Jute Mills Co Ltd. with a malicious word doc or Excel XLS spreadsheet attachment is another one from the current bot runs downloading Locky. The alleged senders email address ( the bit before the @ in ) changes with each email received but the Store-Nellimarla Jute Mills Co Ltd and @slsenterprise.com stays consistent.

Source

Continue reading SPAM MALWARE: BILL Store-Nellimarla Jute Mills Co Ltd→

SPAM MALWARE: Thanks for choosing our company and signing a contract with us

yet another email with the subject of  FW: pretending to come from  random senders  with a zip attachment is another one from the current bot runs which downloads Locky ransomware They use email addresses and subjects that will entice a user to read … Continue reading →

Source

Continue reading SPAM MALWARE: Thanks for choosing our company and signing a contract with us→

SPAM MALWARE: Per E-Mail senden: PRINT0008451941 delivers Locky

The latest in a long line of Locky ransomware downloaders to arrive today is a German language  email with the subject of  Per E-Mail senden: PRINT0008451941 or Per E-Mail senden: SHEET0007865   [ random numbered]  pretending to come from  your own email address … Continue reading →

Source

Continue reading SPAM MALWARE: Per E-Mail senden: PRINT0008451941 delivers Locky→

SPAM MALWARE: “Thank you for booking you car with us” delivers #locky

Carrying on from the mass malspam run overnight is yet an email with the subject of  FW:  pretending to be a notification of a car booking and also pretending  to come from random senders    with a zip attachment containing a nemucod javascript … Continue reading →

Source

Continue reading SPAM MALWARE: “Thank you for booking you car with us” delivers #locky→

SPAM MALWARE: Multiple subjects and attachments all delivering Locky ransomware

Loads and loads of Locky ransomware emails overnight  with varying subjects all  pretending to come from  random senders  with either  zip attachments or word doc macro attachments. They use email addresses and subjects that will entice a user to read the email and … Continue reading →

Source

Continue reading SPAM MALWARE: Multiple subjects and attachments all delivering Locky ransomware→