Collaborate Disseminate
An email with the subject of New Xpress Money Certificate pretending to come from xm.ca@xpressmoney.com with a zip attachment which delivers a java jacksbot Trojan They use email addresses and subjects that will entice a user to read the email and … Continue reading →
Continue reading New Xpress Money Certificate java jacksbot Trojan
After the Brexit vote on Thursday, we are starting to see the scammers and phishers using the uncertainty, fear and doubt about the UK and the EU to scam you. The first one today is an email pretending to come from … Continue reading →
Continue reading New Barclays security update – Phishing scam
Until I received this phishing email, I had never even heard of Skrill so had to do a quick lookup to see what it was. It appears to be some sort of money transfer service and payment system. A bit … Continue reading →
An email with the subject of Fwd: Re: TT-USD78600.00 pretending to come from barat.mnupack@mnubd.com with a malicious word doc attachment is an attempt to exploit CVE-2010-3333 which is a buffer overflow in word RTF files. Anybody using a modern version of word, … Continue reading →
Continue reading Please kindly find attached your swift copy of payment malspam with RTF exploit
An email with the subject of Final version of the report pretending to come from random senders with a zip attachment containing a JavaScript file which downloads Locky Ransomware They use email addresses and subjects that will entice a user to read … Continue reading →
Continue reading Final version of the report malspam leads to #Locky ransomware
An email with the subject of Payment pretending to come from random senders with a zip attachment which downloads Locky ransomware They use email addresses and subjects that will entice a user to read the email and open the attachment. … Continue reading →
An email with the subject of On Hold Transactions From 21.06.2016 pretending to come from Saeed Abugharbieh <saeed.abugharbieh@xpressmoney.com> with a zip attachment that contains a Barys Trojan and a copy of the image in the email. The ,exe file drops a JAVA jar … Continue reading →
Continue reading On Hold Transactions From 21.06.2016 Xpress Money Services
An email with the subject of Corresponding Invoice pretending to come from random senders with a zip attachment which downloads Locky ransomware They use email addresses and subjects that will entice a user to read the email and open the attachment. A … Continue reading →
An email saying Please find below documents for your reference kindly sign pretending to come from gccremittance@emirates.net.ae is one of the latest phish attempts to steal your Outlook Web App log on details which is generally your Microsoft account details, that the … Continue reading →
Continue reading Please find below documents for your reference kindly sign OWA Phishing
It looks like Locky ransomware is back tonight with a series of generic emails pretending to be invoices with the subject of RE: pretending to come from random senders with a zip attachment which downloads what looks suspiciously like Locky … Continue reading →