Internet Service Fee (235424ID) – JS malware leads to Locky

And the next one in the never ending Locky malspam today is an email saying you need to pay $99 for the  requested local repairs on your street with the subject of  Internet Service Fee (235424ID)  [ random characters]  pretending to … Continue reading → Continue reading Internet Service Fee (235424ID) – JS malware leads to Locky→

Scanned by CamScanner New Doc pretending to come from your own email address – JS malware delivering Locky ransomware

The latest in a long, long line of Locky ransomware downloaders is an email with the subject of  New Doc 134 Page 3 ( random doc number, random page number)  pretending to come from CamScanner <your own email address> They use email … Continue reading → Continue reading Scanned by CamScanner New Doc pretending to come from your own email address – JS malware delivering Locky ransomware→

Rechnung R16-4-046 und 060 – word doc macro malware delivers #Locky

A German language  email with the subject of Rechnung R16-4-046 und 060 pretending to come from kontakt@ger-al.de  with a malicious word doc attachment  is another of today’s Malspam emails downloading Locky ransomware. They are using email addresses and subjects that will scare … Continue reading → Continue reading Rechnung R16-4-046 und 060 – word doc macro malware delivers #Locky→

1 Unread Message of High Priority – JS malware delivers Locky

The latest in today’s long line of emails with zip attachments delivering Locky ransomware is an email with the subject of  1 Unread Message of High Priority  pretending to come from  random email addresses . This delivers exactly the same Locky ransomware versions … Continue reading → Continue reading 1 Unread Message of High Priority – JS malware delivers Locky→

New Job Offer ($499,65/day – 2C9FFF5) – JS malware delivers Locky

To continue from THIS post where the Locky ransomware gang pretended that you had been fired, Within an hour or so,  to make up for your misfortune, they now want to offer you a new job paying somewhere between $300 and … Continue reading → Continue reading New Job Offer ($499,65/day – 2C9FFF5) – JS malware delivers Locky→

You Are Fired 24534F3 – JS malware Downloads Locky

An unpleasant way to come back after the Bank Holiday weekend ( in UK ) is an email with the subject of  You Are Fired 24534F3  [ random characters]  pretending to come from   random names and email addresses with a zip attachment which … Continue reading → Continue reading You Are Fired 24534F3 – JS malware Downloads Locky→

Your latest e-invoice from TNT 7072492051_3470848 – word doc macro malware downloads Dridex

An email with the subject of Your latest e-invoice from TNT 7072492051_3470848 (random numbers)  pretending to come from eInvoicing <groupadmine3767379DONOTREPLY@tnt.com>  ( random numbers after the groupadmine) with a malicious word doc or Excel XLS spreadsheet attachment  is another one from the current bot … Continue reading → Continue reading Your latest e-invoice from TNT 7072492051_3470848 – word doc macro malware downloads Dridex→

Third Reminder – Outstanding Account – JS malware – Stupid Locky vigilante strikes again

An email with the subject of   Third Reminder – Outstanding Account pretending to come from random senders and companies   with a zip attachment is another one from the current bot runs which downloads Locky ransomware or is supposed to, but our “friendly” … Continue reading → Continue reading Third Reminder – Outstanding Account – JS malware – Stupid Locky vigilante strikes again→

hi prnt pretending to come from your own email address JS malware delivers Locky

Another blank email with the subject of  hi prnt with a zip attachment is another one from the current bot runs which downloads Locky ransomware They use email addresses and subjects that will entice a user to read the email and open … Continue reading → Continue reading hi prnt pretending to come from your own email address JS malware delivers Locky→