Collaborate Disseminate
A bit of a change to the Trickbot delivery system today, In fact quite a lot of changes. This example is an email containing the subject of “FW: Payslip ” pretending to come from Brightpay payroll services but actually coming from a look-a-… Continue reading Fake Brightpay payslip notification attempts to deliver Trickbot
An email with the subject of “This is an electronic efax Notification” pretending to come from efax but coming from efax@ramatmed.com with a link to download a malicious word doc that delivers Hancitor They are using email addresse… Continue reading Hancitor delivered via fake This is an electronic efax Notification
Following on from last week with an almost identical DHL malware campaign, today I am seeing yet another email pretending to be a DHL Shipment Notification with the subject of Arrival Notice For BL – 06/08/2018 / Vessel – DHL ATLAN… Continue reading Fake DHL Arrival Notice or Shipment Notice delivers malware via embedded exe files inside MP3 music files
Yet another email pretending to be a DHL Shipment Notification with the subject of Shipment Notification pretending to come from DHL but actually coming from dhl@paperattention.com with a malicious word doc attachment delivers some sort of malware…. Continue reading Fake DHL Shipment Notification delivers malware
This example is an email alleging to be a customer complaint with the subject of “FW: Case 27627831 ” pretending to come from Dun & Bradstreet but actually coming from “service@dnbcomplaint.com” which is a look-a-like, typ… Continue reading Fake Dun & Bradstreet customer complaint “FW: Case 27627831 ” delivers Trickbot
This example is an email containing the subject of “I have securely shared file(s) with you” pretending to come from HSBC but actually coming from “James.Holand@hsbcbacs.co.uk” which is a look-a-like, typo-squatted or other do… Continue reading Fake HSBC “Important : Troubles processing BACs payment ” delivers Trickbot
This example is an email containing the subject of “I have securely shared file(s) with you” pretending to come from Microsoft Rights Management but actually coming from a look-a-like, typo-squatted or other domain that can easily be misid… Continue reading Fake Microsoft Rights Management “I have securely shared file(s) with you ” delivers Trickbot
The second in today’s trickbot malspam campaigns is targeted at USA rather than UK and Europe. This example is an email containing the subject of “ADP sent you a new document to sign ” pretending to come from Docusign but actually com… Continue reading Fake Docusign “ADP sent you a new document to sign” delivers Trickbot
This example is an email containing the subject of “You have a new secure mail ” pretending to come from Danske Bank but actually coming from a look-a-like or typo-squatted domain “secure@danskebankco.co.uk” with a malicious w… Continue reading Fake Danske Bank “You have a new secure mail ” delivers trickbot
This example is an email containing the subject of “Unpaid Invoice ” pretending to come from Intuit but actually coming from a look-a-like or typo-squatted domain Gary.Terry@intuit-invoice.com with a malicious word doc attachment is toda… Continue reading Fake Intuit “Unpaid Invoice ” delivers Trickbot