Category Archives: Macro

even more spoofed NatWest bank malspam delivers Trickbot banking trojan

Posted on by

Following on from Yesterday’s NatWest bank spoof delivering Trickbot the criminal gang are continuing with the same set of imitation NatWest domains but a slightly  different email content. An email with the subject of NatWest pretending to come from NatWest but actually coming from a look-a-like domain NatWest Bank <noreply@natwest181.ml> … Continue reading → Continue reading even more spoofed NatWest bank malspam delivers Trickbot banking trojan→

Fake spoofed HSBC Payments request delivers Trickbot banking Trojan

Posted on by

An email with the subject of Payments request  pretending to come from HSBC  but actually coming from a look-a-like domain <message@hsbc-mail.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan They are using email addresses and subjects that … Continue reading → Continue reading Fake spoofed HSBC Payments request delivers Trickbot banking Trojan→

Fake O2 bill delivers Emotet banking Trojan

Posted on by

Continuing with the never ending series of malware downloaders is an email with the subject of My O2 Business – Your O2 Bill is ready – (recipient’s name) coming from random senders  which delivers Emotet banking Trojan There has also been several different fake invoice versions spoofing or faking various companies, some … Continue reading → Continue reading Fake O2 bill delivers Emotet banking Trojan→

More fake, spoofed , imitated NatWest Bank Financial Statement delivering Trickbot banking Trojan

Posted on by

Following on from Friday’s Trickbot failure imitating / spoofing Natwest Bank we start Monday with a working copy An email with the subject of NatWest pretending to come from NatWest but actually coming from a look-a-like domain New post NatWest Bank <noreply@natwest96.ml> with a malicious word doc attachment is today’s … Continue reading → Continue reading More fake, spoofed , imitated NatWest Bank Financial Statement delivering Trickbot banking Trojan→

Outstanding invoices email 1 of 2 malspam delivers Locky ransomware

Posted on by

An email with the subject of Outstanding invoices email 1 of 2 pretending to come from  random names and email addresses with a malicious word doc attachment  delivers Locky Ransomware They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. Remember … Continue reading → Continue reading Outstanding invoices email 1 of 2 malspam delivers Locky ransomware→

fake eFax delivers trickbot banking trojan

Posted on by

An email with the subject of eFax pretending to come from eFax but actually coming from a look-a-like domain eFax <noreply@faxdocuments120.ml>   with a malicious word doc attachment  is today’s latest spoof of a well known company, messaging service, bank or public authority delivering Trickbot banking Trojan They are using email addresses and subjects … Continue reading → Continue reading fake eFax delivers trickbot banking trojan→

Fake You have a Santander Secure Email delivers trickbot

Posted on by

An email with the subject of You have a Santander Secure Email pretending to come from Santander Bank  but actually coming from a look-a-like domain <message@santanderdocs.co.uk>  with an html attachment which downloads a  malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering … Continue reading → Continue reading Fake You have a Santander Secure Email delivers trickbot→

Spoofed Natwest Secure Message delivers trickbot

Posted on by

An email with the subject of Secure Message pretending to come from Natwest but actually coming from a look-a-like domain <message@securenatwest.co.uk> is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan There is a slight change to the delivery mechanism today  with a HTML attachment that … Continue reading → Continue reading Spoofed Natwest Secure Message delivers trickbot→

Spoofed Danske Bank Secure Message malspam delivers trickbot

Posted on by

An email with the subject of Secure Message  pretending to come from Danske Bank   but actually coming from a look-a-like domain <message@danskesecuremessage.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan Danske Bank is a new … Continue reading → Continue reading Spoofed Danske Bank Secure Message malspam delivers trickbot→

Spoofed Danske Bank Secure Message malspam delivers trickbot

Posted on by

An email with the subject of Secure Message  pretending to come from Danske Bank   but actually coming from a look-a-like domain <message@danskesecuremessage.co.uk>  with a malicious word doc attachment  is today’s latest spoof of a well known company, bank or public authority delivering Trickbot banking Trojan Danske Bank is a new … Continue reading → Continue reading Spoofed Danske Bank Secure Message malspam delivers trickbot→