Ihre Bestellung ist auf dem Weg zu Ihnen! OrderID 79872 malspam delivers Locky

The next in the never ending series of Locky downloaders is a German language  email with the subject of  Ihre Bestellung ist auf dem Weg zu Ihnen!  OrderID 79872 ( random number) pretending to come from   Kids Party World <service@kids-party-world.de> … Continue reading →

Source

Continue reading Ihre Bestellung ist auf dem Weg zu Ihnen! OrderID 79872 malspam delivers Locky

Receipt 40247 from The Music Zoo malspam delivers Locky

The next in the never ending series of Locky downloaders is an email with the subject of  Receipt 40247 from The Music Zoo pretending to come from The Music Zoo <shipping3363@themusiczoo.com>  with a random numbered  zip attachment (that matches the subject number) … Continue reading →

Source

Continue reading Receipt 40247 from The Music Zoo malspam delivers Locky

we are very sorry to inform you that the item you requested is out of stock malspam delivers Locky

The next in the never ending series of Locky downloaders is an email with the subject of  Out of stock coming as usual from random companies, names and email addresses  with a random named zip attachment  containing a.JS file. This email … Continue reading →

Source

Continue reading we are very sorry to inform you that the item you requested is out of stock malspam delivers Locky

documents malspam pretending to come from random names @cableone.net delivers Locky / zepto

The next in the never ending series of Locky downloaders is an email with the subject of  documents pretending to come from random names @cableone.net  with a random named zip attachment  containing WSF file They use email addresses and subjects that will … Continue reading →

Source

Continue reading documents malspam pretending to come from random names @cableone.net delivers Locky / zepto

here is the invoice from September 2016 malspam delivers Locky

The Locky gang are getting sloppy and lazy. Instead of a new version of the malware they have reissued the same attachment’s ( although renamed) and malware payload that we described in this post last night. Today’s first malspam in the … Continue reading →

Source

Continue reading here is the invoice from September 2016 malspam delivers Locky

SCAN ALGRAFIKA SH.P.K coming from logistics@ random companies malspam delivers Locky /Zepto

The next in today’s never ending series of Locky downloaders is an email with the subject of  SCAN  coming from  logistics@ random companies, names and email addresses  with a random named zip attachment starting with SCAN _ todays date  containing a WSF file … Continue reading →

Source

Continue reading SCAN ALGRAFIKA SH.P.K coming from logistics@ random companies malspam delivers Locky /Zepto

financial report “somebody is urging you to get the financial report done within this week” malspam delivers Locky

Another day and yet another load of malspam emails in the never ending series of Locky downloaders with an email with the subject of  financial report coming as usual from random companies, names and email addresses  with a random named zip … Continue reading →

Source

Continue reading financial report “somebody is urging you to get the financial report done within this week” malspam delivers Locky

Renewed License “Here is the company’s renewed business license” malspam delivers Locky

Yet another malspam  in the never ending series of Locky downloaders is an email with the subject of  Renewed License coming as usual from random companies, names and email addresses  with a random named zip attachment  containing 2 identical .WSF files … Continue reading →

Source

Continue reading Renewed License “Here is the company’s renewed business license” malspam delivers Locky

Delivery Confirmation: 00336499 malspam coming from ship-confirm@ random companies delivers Locky/Zepto

The next in the never ending series of Locky downloaders is an email with the subject of  Delivery Confirmation: 00336499 [ random numbers] coming as usual from ship-confirm@ random companies, names and email addresses  with a random named zip attachment  containing a .JS … Continue reading →

Source

Continue reading Delivery Confirmation: 00336499 malspam coming from ship-confirm@ random companies delivers Locky/Zepto