Collaborate Disseminate
The next in the never ending series of Locky downloaders is a German language email with the subject of Ihre Bestellung ist auf dem Weg zu Ihnen! OrderID 79872 ( random number) pretending to come from Kids Party World <service@kids-party-world.de> … Continue reading →
Continue reading Ihre Bestellung ist auf dem Weg zu Ihnen! OrderID 79872 malspam delivers Locky
The next in the never ending series of Locky downloaders is an email with the subject of Receipt 40247 from The Music Zoo pretending to come from The Music Zoo <shipping3363@themusiczoo.com> with a random numbered zip attachment (that matches the subject number) … Continue reading →
Continue reading Receipt 40247 from The Music Zoo malspam delivers Locky
The next in the never ending series of Locky downloaders is an email with the subject of Out of stock coming as usual from random companies, names and email addresses with a random named zip attachment containing a.JS file. This email … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Order: 19487600/00 – Your ref.: 11893 [ random order number, random reference number] coming as usual from random companies, names and email addresses … Continue reading →
Continue reading TVH UK LTD random order number malspam leads to Locky
The next in the never ending series of Locky downloaders is an email with the subject of Order Confirmation 9226435 [random number]coming as usual from random companies, names and email addresses with a random named zip attachment containing an HTA … Continue reading →
Continue reading Order Confirmation nnnnnn malspam with a dzip attachment delivers Locky
An email with the subject of Order Confirmation-9355-8379094-20160815-474623 pretending to come from orderconfirmation@esab.co.uk with a malicious word doc attachment is downloads Locky ransomware They are using email addresses and subjects that will scare or entice a user to read the email and open … Continue reading →
An email with the subject of Additional Order (Additional Items) pretending to come from Ahmed <Ahmed@malothgroups.com> with a java .jar which is a variant of Java Adwind Trojan. These are very nasty backdoor Remote Access, password stealers. The immense danger … Continue reading →
Continue reading Additional Order (Additional Items) malspam delivering Java Adwind backdoor Trojan
An email with the subject of Corresponding Invoice pretending to come from random senders with a zip attachment which downloads Locky ransomware They use email addresses and subjects that will entice a user to read the email and open the attachment. A … Continue reading →
An email pretending to be an order for scarves with the subject of Re: PO pretending to come from Martina O’Shea <Martinashea@maf.ae> with a Java jar attachment which downloads some malware. Almost all email clients will block java jar files when not … Continue reading →
Loads and loads of Locky ransomware emails overnight with varying subjects all pretending to come from random senders with either zip attachments or word doc macro attachments. They use email addresses and subjects that will entice a user to read the email and … Continue reading →
Continue reading SPAM MALWARE: Multiple subjects and attachments all delivering Locky ransomware