Collaborate Disseminate
Today’s Trickbot campaign is a pretty lame example from this prolific malware gang. The email containing the subject of “Submission 5DW8 F36N MG2A 9HJ not processed ” pretending to come from noreply.taxreg@notifications.hmrc.gov.uk b… Continue reading Fake HMRC “Submission 5DW8 F36N MG2A 9HJ not processed ” delivers trickbot
This example is an email containing the subject of “Critical Notice: Statement of Liabilities” pretending to come from HMRC but actually coming from “service@hmrcemail.co.uk” which is a look-a-like, typo-squatted or other domai… Continue reading Fake HMRC “Critical Notice: Statement of Liabilities” delivers Trickbot
This example is an email containing the subject of “FW: Unpaid Invoice 17.07.2018” pretending to come from HMRC but actually coming from a look-a-like or typo-squatted domain “Melanie.Moran@hmrcco.uk” with a malicious word doc… Continue reading Trickbot deliveredc via fake HMRC “FW: Unpaid Invoice 17.07.2018”
Who’s been collecting the voice prints of millions of people saying “My voice is my password”? Why has it become tougher for law enforcement to scoop up cellphone data? And who’s been turning up your central heating?
All this and much much more is disc… Continue reading Smashing Security #084: No! My voice is not my password
This example is an email containing the subject of “FW: Payslip” pretending to come from UK Tax Service but actually coming from a look-a-like or typo-squatted domain “Amanda.Right@tax-service-gov.uk” with a malicious word do… Continue reading Fake “Fw: Payslip” from tax-service-gov.uk delivers Trickbot
We have had a break from Trickbot hitting the UK in last week or so, that generally means that the criminals are experimenting with new delivery systems. The reappearance on Monday 25 June 2018 confirms this. I am not sure how successful this new syste… Continue reading Fake HMRC “Important : Outstanding Amount ” delivers Trickbot via CVE-2018-8174
The agency doesn’t ask for explicit consent to collect the voiceprints; and, the deletion and erasure process lacks transparency. Continue reading UK Tax Agency Collects 5.1M Biometric Voice IDs, May Violate GDPR
An email with the subject of Secure email message pretending to come from HMRC but actually coming from a look-a-like domain HM Revenue & Customs <Gary.Brooks@hrmccommunication.co.uk> with a malicious Excel XLSM attachment is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan. It is a … Continue reading → Continue reading Another Spoofed HMRC Company Excel Documents delivers trickbot
An email with the subject of You have a new secure communication pretending to come from HMRC but actually coming from a look-a-like domain and email address HM Revenue & Customs <donotreply@hmrccommunication.co.uk> with a malicious word doc attachment is today’s latest spoof of a well known company, bank or public authority delivering … Continue reading → Continue reading Another spoofed HMRC You have a new secure communication malspam delivers Trickbot banking trojan
An email with the subject of You have received a secure document via DocuSign pretending to come from HMRC via Docusign but actually coming from a look alike domain <noreply@docusign.delivery> with a malicious word doc attachment is today’s latest spoof of a well known company, bank or public authority delivering … Continue reading → Continue reading Fake HMRC via a Spoofed Docusign domain You have received a secure document via DocuSign malspam delivers trickbot