Collaborate Disseminate
The latest in a long line of generic emails delivering Locky ransomware is an email with the subject of Payment Receipt pretending to come from random companies and email addresses with a malicious word doc attachment They are using email addresses … Continue reading →
Continue reading Attached is the copy of your payment receipt leads to Locky ransomware
A Portuguese / Brazilian language email with the subject of Nota Fiscal Eletronica 09/05/2016 91616 pretending to come from OESA COMERCIO E REPRESENTACOES LTDA <naoresponder@oesa.com.br> with a zip attachment is another one from the current bot runs which downloads Locky ransomware They use email … Continue reading → Continue reading MALWARE: “Nota Fiscal Eletronica 09/05/2016 91616” delivers #Locky
An email pretending to be a receipt containing terrible spelling or typing mistakes with the subject of Re:Draft Receipt pretending to come from Awad S.Yafie <yinengchem@yeah.net> with a malicious word doc attachment is another one from the current bot runs which try … Continue reading → Continue reading Malware: Yafie Group “Re:Draft Receipt”
An email with the subject of Receipt pretending to come from Mike <mike@xencourier.co.uk> with a malicious Excel XLS spreadsheet attachment is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza … Continue reading → Continue reading Receipt xencourier.co.uk – excel xls spreadsheet macro malware
Last revised or Updated on: 30th March, 2016, 2:31 PMwe are seeing a whole series of different email subjects and body contents coming from random senders downloading Locky ransomware from multiple places today They use email addresses and subjects that will entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. Most of these are using such generic subjects that somebody must be expecting an email about that sort of thing so are likely to open it without really thinking. Some of the subjects include FW:Expenses Report # 109681 – 03/2016 payment confirmation Additional … Continue reading → Continue reading Multiple email subjects delivering Locky ransomware
Last revised or Updated on: 16th February, 2016, 9:53 AMAn email with the subject of receipt pretending to come from Accounts <accounts@aacarpetsandfurniture.co.uk> with a malicious word doc or Excel XLS spreadsheet attachment is another one from the current bot runs which try to download various Trojans and password stealers especially banking Trojans like Dridex or Dyreza and ransomware like cryptolocker or Teslacrypt. They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The email looks like: From: Accounts <accounts@aacarpetsandfurniture.co.uk> Date: Tue 16/02/2016 08:22 Subject: receipt Attachment: CCE06102015_00000.docm … Continue reading → Continue reading receipt Accounts – word doc or excel xls spreadsheet malware