Collaborate Disseminate
An email with the subject of Remittance Details (USD 7956.88) – your web address pretending to come from random senders with a malicious word doc or Excel XLS spreadsheet attachment is another one from the current bot runs which try to … Continue reading → Continue reading Remittance Details (USD 7956.88) – your web address – word doc rtf macro malware delivers Dridex
A blank / empty email with the subject of Document(1) pretending to come from your own email address with a malicious word doc attachment is another one from the current bot runs which try to download various Trojans and password stealers especially banking … Continue reading → Continue reading Document(1) pretending to come from your own email address – word doc macro malware
An email with no subject pretending to come from Liberty Wines, Invoicing <invoicing@libertywines.co.uk> with a zip attachment is another one from the current bot runs which downloads an unknown malware probably either Locky ransomware or Dridex banking Trojan They use email addresses and … Continue reading → Continue reading Liberty Wines Invoicing – JS malware
An email with the subject of New Voicemail Message From 07792084437 [ random numbers] pretending to come from Soho66 <noreply@soho66.co.uk> with a zip attachment is another one from the current bot runs which downloads some sort of malware that analysis is inconclusive. … Continue reading → Continue reading Soho66 New Voicemail Message From 07792084437 – JS malware
An email with the subject of Unpaid Bill for Car Repair Service 7650 [ random numbered] pretending to come from random names and email addresses with a zip attachment is another one from the current bot runs which downloads teslacrypt They use email addresses … Continue reading → Continue reading Unpaid Bill for Car Repair Service 7650 – JS malware leads to Teslacrypt
This email that appears to be from Union National Bank-Egypt with the subject of PFI -05.04.16 pretending to come from CEO Finexx Group <sales@salesbabu.com> with a malicious word doc attachment is another one from the current bot runs which try to download various … Continue reading → Continue reading PFI -05.04.16 Union National Bank-Egypt – word doc malware
An email with the subject of Actual Status on Your Balance 49166 [ random numbered] pretending to come from random names and email addresses with a zip attachment is another one from the current bot runs which downloads Teslacrypt ransomware They use email … Continue reading → Continue reading Actual Status on Your Balance 49166 – JS malware leads to Teslacrypt ransomware
An email with the subject of Invoice: 912409 pretending to come from UK e-pay Email Server (epay UK) <DO.NOT.REPLY.TO@uk.epayworldwide.com> with a zip attachment is another one from the current bot runs which downloads Dridex banking Trojan They use email addresses and subjects that … Continue reading → Continue reading Invoice: 912409 UK e-pay Email Server – JS malware leads to Dridex
An email with the subject of Receipt pretending to come from Mike <mike@xencourier.co.uk> with a malicious Excel XLS spreadsheet attachment is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza … Continue reading → Continue reading Receipt xencourier.co.uk – excel xls spreadsheet macro malware
An email with the subject of Your parcel #898322, Status: Arrived Otis Ryan [ random numbered] pretending to come from Otis Ryan <cobranza@moldecor.com> with a zip attachment is another one from the current bot runs which downloads some sort of malware They use … Continue reading → Continue reading Your parcel #898322, Status: Arrived Otis Ryan – JS malware