Collaborate Disseminate
An email pretending to be a sage invoice with the subject of FW: Invoice_515002 coming from “postmaster@footballplayers19.gq”@footballplayers19.gq; on behalf of; Leanna Sage Whitaker <postmaster@footballplayers19.gq> with a zip attachment which downloads They use email addresses and subjects that will entice a user to … Continue reading →
An email pretending to be an order for scarves with the subject of Re: PO pretending to come from Martina O’Shea <Martinashea@maf.ae> with a Java jar attachment which downloads some malware. Almost all email clients will block java jar files when not … Continue reading →
The next in todays malspam is an email with the subject of VAT Return pretending to come from noreply@hmrc.gov.uk with a malicious word doc attachment is another one from the current bot runs which try to download various Trojans and password stealers especially … Continue reading →
Continue reading VAT Return – macro malware downloads ransomware
It looks like the malware gangs are back after a 3 week break. The first one to talk about is an email with the subject of Andrew Lumley sent you “Scan001.zip” pretending to come from Andrew Lumley via Dropbox <no-reply@dropbox.com> … Continue reading →
There is nothing really special about this Apple phishing attempt. The email text is identical to what we normally see. The only mentionable thing is the amount of copies I have received today. Somewhere in the region of 300 copies … Continue reading →
Continue reading Your Apple ID has been disabled for security reasons – Phishing
There are a few major common subjects in a phishing attempt. Lots of them are either PayPal, your Bank or your Credit Card, with a message saying some thing like : Urgent: Your card has been stopped ! There have … Continue reading →
Continue reading We have temporarily disabled your Credit/Debit Card – phishing
Since yesterday 15 June 2016, we have been hearing about a slow but steady trickle of Locky ransomware / Dridex banking Trojan JavaScript downloaders inside zip file attachments. The first one I received on my mail server were at about 4 am UTC … Continue reading →
Continue reading Locky ransomware / Dridex banking Trojan trying to come back
A very strange one that I cannot work out if it is a phishing attempt, an attempt to deliver malware or just a cock-up by the bad guys sending it. An email in a mixture of Spanish & German language that … Continue reading →
I received, what at first glance looked like a “normal” PayPal phishing email. It looked a typical email from a clueless phisher, using one of the phishing kits, with a standard email with a HTML form attachment. OK nothing weird … Continue reading →
I have seen some clueless spammers over the years but this Chinese one who appears to be spamming himself, must take the biscuit. Like many blogs and websites we have sharing links. These allow you to share interesting or informative posts … Continue reading →