Collaborate Disseminate
A bit of a change to the Trickbot delivery system today with this email containing the subject of “PayPal account warning” pretending to come from service@paypal.com but actually coming from “noreply@administrationservpaypal-a.tk̶… Continue reading Fake PayPal account warning delivers Trickbot
Yet another email pretending to be a DHL Shipment Notification with the subject of Shipment Notification pretending to come from DHL but actually coming from dhl@paperattention.com with a malicious word doc attachment delivers some sort of malware…. Continue reading Fake DHL Shipment Notification delivers malware
This example is an email alleging to be a customer complaint with the subject of “FW: Case 27627831 ” pretending to come from Dun & Bradstreet but actually coming from “service@dnbcomplaint.com” which is a look-a-like, typ… Continue reading Fake Dun & Bradstreet customer complaint “FW: Case 27627831 ” delivers Trickbot
This example is an email containing the subject of “I have securely shared file(s) with you” pretending to come from HSBC but actually coming from “James.Holand@hsbcbacs.co.uk” which is a look-a-like, typo-squatted or other do… Continue reading Fake HSBC “Important : Troubles processing BACs payment ” delivers Trickbot
This example is an email containing the subject of “I have securely shared file(s) with you” pretending to come from Microsoft Rights Management but actually coming from a look-a-like, typo-squatted or other domain that can easily be misid… Continue reading Fake Microsoft Rights Management “I have securely shared file(s) with you ” delivers Trickbot
The second in today’s trickbot malspam campaigns is targeted at USA rather than UK and Europe. This example is an email containing the subject of “ADP sent you a new document to sign ” pretending to come from Docusign but actually com… Continue reading Fake Docusign “ADP sent you a new document to sign” delivers Trickbot
This example is an email containing the subject of “You have a new secure mail ” pretending to come from Danske Bank but actually coming from a look-a-like or typo-squatted domain “secure@danskebankco.co.uk” with a malicious w… Continue reading Fake Danske Bank “You have a new secure mail ” delivers trickbot
This example is an email containing the subject of “Unpaid Invoice ” pretending to come from Intuit but actually coming from a look-a-like or typo-squatted domain Gary.Terry@intuit-invoice.com with a malicious word doc attachment is toda… Continue reading Fake Intuit “Unpaid Invoice ” delivers Trickbot
This example is an email containing the subject of “FW: Unpaid Invoice 17.07.2018” pretending to come from HMRC but actually coming from a look-a-like or typo-squatted domain “Melanie.Moran@hmrcco.uk” with a malicious word doc… Continue reading Trickbot deliveredc via fake HMRC “FW: Unpaid Invoice 17.07.2018”
This example is an email containing the subject of “Past due invoice 07.16.2018 ” pretending to come from ADP but actually coming from a look-a-like or typo-squatted domain adp-invoice.co.uk with a malicious word doc attachment that pret… Continue reading Fake ADP “Past due invoice 07.16.2018 ” malspam delivers Trickbot