Category Archives: macro virus

Fake Companies House Company ID : XXXXX391 malspam delivers Trickbot banking Trojan

Posted on by

An email with the subject of Company ID : XXXXX391 pretending to come from Companies House but actually coming from a look-a-like domain Companies House <message@companieshouseemail.uk>   or  Companies House <message@companieshousemail.uk> with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot … Continue reading → Continue reading Fake Companies House Company ID : XXXXX391 malspam delivers Trickbot banking Trojan→

Fake Barclays bank Ref: 72381821 delivers Trickbot banking Trojan

Posted on by

An email with the subject of Ref: 72381821 pretending to come from Barclays Bank but actually coming from a look-a-like domain Barclays <message@barclaysmail.co.uk> or Barclays <message@barclays-mail.co.uk> with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using … Continue reading → Continue reading Fake Barclays bank Ref: 72381821 delivers Trickbot banking Trojan→

even more spoofed NatWest bank malspam delivers Trickbot banking trojan

Posted on by

Following on from Yesterday’s NatWest bank spoof delivering Trickbot the criminal gang are continuing with the same set of imitation NatWest domains but a slightly  different email content. An email with the subject of NatWest pretending to come from NatWest but actually coming from a look-a-like domain NatWest Bank <noreply@natwest181.ml> … Continue reading → Continue reading even more spoofed NatWest bank malspam delivers Trickbot banking trojan→

Fake spoofed HSBC Payments request delivers Trickbot banking Trojan

Posted on by

An email with the subject of Payments request  pretending to come from HSBC  but actually coming from a look-a-like domain <message@hsbc-mail.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email addresses and subjects that … Continue reading → Continue reading Fake spoofed HSBC Payments request delivers Trickbot banking Trojan→

Fake O2 bill delivers Emotet banking Trojan

Posted on by

Continuing with the never ending series of malware downloaders is an email with the subject of My O2 Business – Your O2 Bill is ready – (recipient’s name) coming from random senders  which delivers Emotet banking Trojan There has also been several different fake invoice versions spoofing or faking various companies, some … Continue reading → Continue reading Fake O2 bill delivers Emotet banking Trojan→

More fake, spoofed , imitated NatWest Bank Financial Statement delivering Trickbot banking Trojan

Posted on by

Following on from Friday’s Trickbot failure imitating / spoofing Natwest Bank we start Monday with a working copy An email with the subject of NatWest pretending to come from NatWest but actually coming from a look-a-like domain New post NatWest Bank <noreply@natwest96.ml> with a malicious word doc attachment is today’s … Continue reading → Continue reading More fake, spoofed , imitated NatWest Bank Financial Statement delivering Trickbot banking Trojan→

Outstanding invoices email 1 of 2 malspam delivers Locky ransomware

Posted on by

An email with the subject of Outstanding invoices email 1 of 2 pretending to come from  random names and email addresses with a malicious word doc attachment  delivers Locky Ransomware They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. Remember … Continue reading → Continue reading Outstanding invoices email 1 of 2 malspam delivers Locky ransomware→

Fake You have a Santander Secure Email delivers trickbot

Posted on by

An email with the subject of You have a Santander Secure Email pretending to come from Santander Bank  but actually coming from a look-a-like domain <message@santanderdocs.co.uk>  with an html attachment which downloads a  malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering … Continue reading → Continue reading Fake You have a Santander Secure Email delivers trickbot→

Spoofed Natwest Secure Message delivers trickbot

Posted on by

An email with the subject of Secure Message pretending to come from Natwest but actually coming from a look-a-like domain <message@securenatwest.co.uk> is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan There is a slight change to the delivery mechanism today  with a HTML attachment that … Continue reading → Continue reading Spoofed Natwest Secure Message delivers trickbot→

Spoofed Danske Bank Secure Message malspam delivers trickbot

Posted on by

An email with the subject of Secure Message  pretending to come from Danske Bank   but actually coming from a look-a-like domain <message@danskesecuremessage.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan Danske Bank is a new … Continue reading → Continue reading Spoofed Danske Bank Secure Message malspam delivers trickbot→