Collaborate Disseminate
An email partly in German and partly in English pretendimng to be a mobile phone bill with the subject of Rechnung 2016-93910 [ random numbered] pretending to come from mpsmobile GmbH <info@mpsmobile.de> with a zip attachment which downloads Locky ransomware They use email … Continue reading →
Continue reading Rechnung 2016-93910 mpsmobile GmbH malspam delivers Locky ransomware
We see hundreds of adverts, “get rich quick” emails and every other type of enticement for you to give money to someone, with the “promise” of a big reward down the line. We cannot stress enough that NO-ONE except the … Continue reading →
Continue reading Fake Invoices Quick cash systems binary options fraud scams
An email with the subject of Scanned image pretending to come from random names at your own email domain or company with a malicious word doc macro attachment delivers Locky Ransomware They are using email addresses and subjects that will scare or entice … Continue reading →
Continue reading Scanned image pretending to come from your own email domain delivers Locky
I am not sure how many UK citizens have a bank account with ABSA which is a South African bank, but it can’t be many, so hopefully they won’t get a good response from this malspam phishing email The original … Continue reading →
Continue reading Absa Credit Card Account Statement Fee Deducted – phishing scam
A blank email with the subject of RE: info pretending to come from asisianu@pauleycreative.co.uk with a zip attachment with a jse file which downloads what looks like some sort of Trojan, that I am not sure what it does. There appear to be … Continue reading →
Continue reading blank malspam email with jse attachment downloading unknown malware
We are seeing emails daily with a zip attachment containing java jar file which are variants of Java Adwind Trojan. These are very nasty backdoor Remote Access, password stealers. The immense danger of JAVA files being sent by email cannot be overstressed. … Continue reading →
An email with the subject of name@victim domain.tld has sent you a file via WeTransfer pretending to come from WeTransfer <noreply@wetransfer.com> with a link to download a zip attachment which downloads Cerber Ransomware. Luckily Cerber doesn’t mass malspam in the same way … Continue reading →
Following on from this post which gained lots of attention, I have been told about a new one today. This one fulfils our worse fears and the entire phish is performed on a website that actually is the genuine Google … Continue reading →
Continue reading Phishing via JavaScript Google this time not PayPal
I haven’t posted much this week about the continual Locky JavaScript downloaders because they quite frankly haven’t been worth bothering with. Yes, there have been quite a few of them, but they have been such generic emails with such vague subjects as … Continue reading →
Continue reading continuing with Locky delivered via Malspam
An email with the subject of Additional Order (Additional Items) pretending to come from Ahmed <Ahmed@malothgroups.com> with a java .jar which is a variant of Java Adwind Trojan. These are very nasty backdoor Remote Access, password stealers. The immense danger … Continue reading →
Continue reading Additional Order (Additional Items) malspam delivering Java Adwind backdoor Trojan