Collaborate Disseminate
Security researchers have spotted a massive malware campaign that sent out 23 million messages laden with Locky ransomware in the span of 24 hours.
David Bisson reports.
Continue reading Massive Locky ransomware campaign sends out 23 million emails in 24 hours
We are seeing a run of a very different Locky delivery email tonight. This only seems to work properly in Google Chrome, Firefox gives a simple download file box and Internet Explorer gives error messages on clicking the “click here” link. This means that Internet Explorer users will be safe … Continue reading → Continue reading Fake Dropbox Please verify your email address delivers Locky ransomware
Locky attempts to evade detection by relying once more on simply, yet effective user interaction.
Categories:
Malware
Threat analysis
Tags: Lockymacroransomwareword
(Read more…)
The post Locky ransomware adds anti sandbox feature appeared first … Continue reading Locky ransomware adds anti sandbox feature
Whenever we feel like the Locky ransomware is dead, the notorious threat returns with a bang.
Recently, researchers from two security firms have independently spotted two mass email campaigns, spreading two different, but new variants of the Locky ran… Continue reading Massive Email Campaign Sends Locky Ransomware to Over 23 Million Users
The next in the never ending series of Locky downloaders is an email with the subject of E-invoice for your order #6377810026 [ random numbers]pretending to come from do_not_reply@ random Apple email addresses . the addresses I have seen include: do_not_reply@eu.apple.com do_not_reply@asia.apple.com do_not_reply@us.apple.com They use email addresses and subjects that will … Continue reading → Continue reading Fake apple E-Invoice malspam delivers Locky Ransomware
There was another big overnight Locky malspam run in UK last night. (about 1300 copies so far, not quite as aggressive as some recent Locky campaigns which have delivered ~1500 copies in 20 minutes ) The next in the never ending series of Locky downloaders is an email with the … Continue reading → Continue reading More Locky ransomware delivered by Emailing: Payment_201708-### malspam
The next in the never ending series of Locky downloaders is an email with the subject of You have received a scan from AT Management pretending to come from Scan @ AT Management <scan_754@atmanagement.co.uk> [random numbers after the scan_] All these are being addressed to Accounts: <name@victiomdomain.tld> They use email addresses … Continue reading → Continue reading You have received a scan from AT Management malspam delivering Locky ransomware
Today’s first mass malspam in the never ending series of Locky downloaders is a typically unbelievable email, that of course will encourage recipients to open the attachment because it is so stupid and obviously nothing to do with BT. However because it pretends to come from somebody else on your email … Continue reading → Continue reading Fake BT bill pretending to come from your own email address or company delivers Locky ransomware
Today’s first mass malspam in the never ending series of Locky downloaders is a typically unbelievable email, that of course will encourage recipients to open the attachment because it is so stupid and obviously nothing to do with BT. However because it pretends to come from somebody else on your email … Continue reading → Continue reading Fake BT bill pretending to come from your own email address or company delivers Locky ransomware
An email with the subject of Your Sage subscription invoice is ready pretending to come from Sage but actually coming from a look-a-like domain noreply@sagetop.com with a malicious word doc attachment is today’s latest attempt to deliver Locky ransomware They are using email addresses and subjects that will scare or entice a … Continue reading → Continue reading Your Sage subscription invoice is ready deliver Locky ransomware