Collaborate Disseminate
We have been seeing a lot of formbook malware recently. This campaign is very similar to all the others we frequently see. The only reason for mentioning it is that it is very unusual for malware campaigns to take place over a weekend. Most of this typ… Continue reading Fake Quotation request delivers Formbook
Some days we have lots of problems trying to decide what malware is being delivered. Today is an exception. The bad actor has made it bleeding obvious by his use of the file names & url paths. I suppose this semi-clueless Skiddie has purchased an o… Continue reading Making it Bleeding Obvious
Today’s first example of malware received overnight is a slightly less usual delivery method for Lokibot. The email is a common lure pretending to be a quote / Inquiry request and is nothing special. The subject is “Re: Inquiry / Quotes&… Continue reading Slightly different Lokibot delivery via embedded ole objects in rtf word doc
The next in the never ending series of malware laden emails is this where somebody cannot spell or type properly with the subject of REVIEW QOUTATION pretending to come from aaron.coley@jonescompanies.com although they did get the correct spelling in the email body. They use email addresses and subjects that will entice, persuade, scare or … Continue reading → Continue reading REVIEW QOUTATION malspam delivers some sort of malware
We see lots of phishing attempts for email credentials. The scammers get ever more creative and try new and different tricks all the time. This one pretends to be a request for a quotation for an urgent order. They use email addresses and subjects that will entice a user to … Continue reading → Continue reading Urgent Order Quotation – Phishing for email credentials
We see lots of phishing attempts for email credentials. These scammers and phishers get ever more creative and devious in their attempts to steal your email credentials. This one is different than many others and much more devious. It pretends to be a Request for Quotation. They use email addresses … Continue reading → Continue reading Spoofed Brancodi Request for Quotation phishing scam