Facture : 1985 corrigée Buvasport – JS malware Locky downloader

A French language email with the subject of  Facture : 1985 corrigée pretending to come from Louis – Buvasport <louis6@buvasport.com>  ( random numbers after Louis) with a zip attachment is another one from the current bot runs which downloads They use email addresses … Continue reading → Continue reading Facture : 1985 corrigée Buvasport – JS malware Locky downloader→

Your Latest Documents from Angel Springs Ltd [88665A9D] – JS malware leads to #Teslacrypt

An email with the subject of  Your Latest Documents from Angel Springs Ltd [88665A9D][ random numbered]  pretending to come from random senders  with a zip attachment is another one from the current bot runs which downloads They use email addresses and subjects that … Continue reading → Continue reading Your Latest Documents from Angel Springs Ltd [88665A9D] – JS malware leads to #Teslacrypt→

Business Card Tracey Gittens – JS malware leads to Dridex

An empty / blank email with the subject of  Business Card pretending to come from Tracey Gittens <traceygittens@hotmail.com> with a zip attachment is another one from the current bot runs which downloads Dridex banking Trojan They use email addresses and subjects that will … Continue reading → Continue reading Business Card Tracey Gittens – JS malware leads to Dridex→

Emailing: M_20150401_0729_AY56EMF __XLRAE55CF0L324298 – DTC Workshop – word doc macro malware

An email with the subject of Emailing: M_20150401_0729_AY56EMF      __XLRAE55CF0L324298 pretending to come from  DTC Workshop <workshop@digitaltachocentre.co.uk> with a malicious word doc  attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like … Continue reading → Continue reading Emailing: M_20150401_0729_AY56EMF __XLRAE55CF0L324298 – DTC Workshop – word doc macro malware→

CAJA 87889 FACTURA 48024NMX – CK Polendo, Guillermo Navistar.com – word doc macro malware

A mixed Spanish / English email with the subject of  CAJA  87889  FACTURA  48024NMX – CK  [ random numbers] pretending to come from Polendo, Guillermo <Guillermo.Polendo@Navistar.com>  with a malicious word doc attachment  is another one from the current bot runs which try … Continue reading → Continue reading CAJA 87889 FACTURA 48024NMX – CK Polendo, Guillermo Navistar.com – word doc macro malware→

Your Latest Documents from Angel Springs Ltd [STA054C] – word doc macro malware leads to Locky Ransomware

An email with the subject of Your Latest Documents from Angel Springs Ltd [STA054C]  pretending to come from  ebilling@angelsprings.com with a malicious word doc attachment  is another one from the current bot runs which try to download various Trojans and password stealers … Continue reading → Continue reading Your Latest Documents from Angel Springs Ltd [STA054C] – word doc macro malware leads to Locky Ransomware→

Dossier n° 46612 CABINET BETTAN – word doc macro malware

A French language email with the subject of Dossier n° 46612 [ random numbers] pretending to come from CABINET BETTAN <joel.bettan@cabinetbettan.com> with a malicious word doc or Excel XLS spreadsheet attachment  is another one from the current bot runs which try to download various … Continue reading → Continue reading Dossier n° 46612 CABINET BETTAN – word doc macro malware→

latest invoice / sales invoice /purchase invoice – word doc macro malware

A series of  email with the basic subject of invoice  pretending to come from  random names with a malicious word doc attachment  is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like … Continue reading → Continue reading latest invoice / sales invoice /purchase invoice – word doc macro malware→