Collaborate Disseminate
A slightly different / more difficult to detect phishing attempt this time. I thought it was a new malware approach using PDF files and they had found or were using a new 0 day exploit, but luckily, it is just … Continue reading → Continue reading Phishing: E-payment Alert on Your Account Capital One 360
An email that pretends to alert you to strange activity on your credit card, with the subject of Anti-Fraud System-332571 [ random numbered] pretending to come from random senders and email addresses with a zip attachment is another one from the current … Continue reading → Continue reading SPAM MALWARE: Anti-Fraud System-332571 delivers #Locky
Is it any wonder hundreds/thousands or millions of people fall foul of phishing attempts every year and give their details willingly, when the phishers use domain names that are so believable and the registrars allow them to register the domains. … Continue reading → Continue reading Why Phishing works so well
Yet another email that pretends to contain a spreadsheet with financial information with the subject of :Re pretending to come from random senders and email addresses with a zip attachment is another one from the current bot runs which downloads Locky ransomware They use … Continue reading → Continue reading SPAM MALWARE: “I have attached a revised spreadsheet contains” leads to #Locky
Another empty blank email email with the subject of Attached Picture pretending to come from copier / scanner / [ random numbers] @ your own email address with a zip attachment is another one from the current bot runs which downloads what … Continue reading → Continue reading SPAM MALWARE: Attached Picture from scanner / copier at your own email address
Yet another email with the subject of FW: pretending to come from random senders with a zip attachment which is supposed to download either Locky or Dridex. However the .JS file inside the zip just contains about 20 characters of plain text that … Continue reading → Continue reading SPAM MALWARE: “Dear Customer please be advised of a new incoming transfer”
Another email with the subject of FW: pretending to come from random senders with a zip attachment is another one from the current bot runs which downloads what looks like either Dridex or Locky but automatic analysis doesn’t give a definite result. It … Continue reading → Continue reading SPAM MALWARE: We have reviewed your application
A series of email with random subjects pretending to come from random senders and email addresses with a zip attachment is another one from the current bot runs which downloads Locky ransomware. UPDATE: none of the automatic analysers are actually showing Locky, … Continue reading → Continue reading SPAM MALWARE: random subjects “You may refer to the attached document for details” delivers #Locky
An email with the subject of Emailing: Photo 05-11-2016, 82 95 82 [ random numbers] pretending to come from Your own email address with a zip attachment is another one from the current bot runs which downloads Locky Ransomware Update 12 May 2016: … Continue reading → Continue reading SPAM MALWARE: “Emailing: Photo 05-11-2016, 82 95 82” delivers #Locky
An email with the subject of PO # 10 – B F pretending to come from Kalyani Purchase <purchase@kalyanimotors.com> with a zip attachment is another one from the current bot runs which downloads the same Locky ransomware version as described in … Continue reading → Continue reading Malware: “PO # 10 – B F” delivers Locky