Collaborate Disseminate
The actors responsible for the Emotet botnet returned after a four-month period of inactivity with a new malspam campaign. On 16 September, SpamHaus security researcher Raashid Bhat spotted a spate of new spam emails written in Polish or German that co… Continue reading Emotet Botnet Returns After Four-Month Hiatus With New Spam Campaign
A new spam campaign is attempting to infect German-speaking users with samples of the destructive Ordinypt malware family. According to Bleeping Computer, the campaign sent spam emails masquerading as a job application from someone named Eva Richter. T… Continue reading Spam Campaign Targeting German Users with Ordinypt Malware
It looks like Friday the 13th is unlucky for this malware bad actor, trying to deliver yet another AgentTesla keylogger / info-stealer because as far as I can tell this malware chain is broken so the victim should not get the payload. WE still see lo… Continue reading A Friday the 13th failure for Agenttesla campaign
I get emails like this all the time:
Hello dear,
I’m a long time reader. I’m writing to you because I’d love to contribute a guest post on your website.
I’ve been brainstorming some topics that I think your readers would g… Continue reading Why would a stranger offer to write content for a nonexistent blog?
WE still see loads of AgentTesla keylogger/ Info-stealer malware campaigns hitting the UK most days. Today is no exception with quite a few so far. I don’t always post them here, unless there is something slightly different or unusual about eithe… Continue reading More AgentTesla keylogger campaigns
Proofpoint’s senior director of the threat research team discusses the strange levels that attackers are going to in order to persuade victims to click on phishing messages. Continue reading Strangest Phishing Lures of 2019: From Divorce Papers to Real Estate Decoys
WE still see loads of AgentTesla keylogger/ Info-stealer malware campaigns hitting the UK most days. I don’t often post them here, unless there is something slightly different or unusual about either the delivery method or the malware itself chan… Continue reading AgentTesla keylogger campaigns continue
I built a landing page with a “sign up with your email to get notified” sort of thing. The button executes some AJAX and submits to a PHP file which sends an email to me. Now, I’m getting a bunch of signups, but I’ve never advertised the l… Continue reading Spam email sign ups from HeadlessChrome?
A large U.S. manufacturing company is the latest organization to be targeted with the LokiBot trojan – although this most recent campaign harbored some bizarre red flags. Continue reading U.S. Manufacturer Most Recent Target of LokiBot Malspam Campaign
I was extremely surprised to wake up this Sunday Morning to a whole slew of fake DHL delivery notice emails with a macro enabled word doc attachment that eventually downloads some sort of Keylogger. There is some dispute as to what the actual Keylogge… Continue reading Fake DHL email delivers an unknown keylogger coupled with a phishing scam