Collaborate Disseminate
We are back to a slightly more complicated or involved Trickbot download campaign today with links in the email to download the XLS file instead of attachments. This malware campaign delivery method was first mentioned on 22 October 2018 when I missed … Continue reading Fake Companies House “Company report” delivers Trickbot
After the last couple of weeks of the Trickbot gang playing around with weird & wonderful and slightly more complicated delivery methods, they have today reverted to the tried & trusted formats. This example is today’s latest spoof or imitatio… Continue reading Fake Lloyds Bank “Case Number: 238963BACS” delivers Trickbot
We are back to a more complicated Trickbot download campaign today with links in the email to download the XLS file instead of attachments. This was first mentioned on 22 October 2018 when I missed the onslaught. This example is today’s latest spoof… Continue reading trickbot via fake Ernst & Young overdue invoice
This example is today’s latest spoof or imitation of a well-known company, bank or public authority delivering Trickbot banking Trojan. The email with the subject of “RE: Reference Number: 20515522” pretends to come from HMRC Business VAT R… Continue reading trickbot via Fake HMRC Business VAT Reclaim RE: Reference Number: 20515522
I am a bit late reporting on these Trickbot campaigns from yesterday 22 October 2018. I saw a tweet this morning saying about 2 campaigns yesterday. the first hitting UK Spoofing Microsoft Office and the second hitting USA / Canada Which spoofs BMO Ba… Continue reading Trickbot campaigns 22 October 2018 hitting UK and Canada
This example is an email containing the subject of “Month End Report Sep 2018.xls ” pretending to come from HMRC but actually coming from “Brenda.Kimbell@hrmc-reports.co.uk” which is a look-a-like, typo-squatted or other domain… Continue reading trickbot via Fake HMRC “Month End Report Sep 2018.xls ” email
This example is an email containing the subject of “New fax message” coming from “noreply@confidentialfax.com ” . For a change the Trickbot criminals are not spoofing or typo-squatting any well known brand, company or Government… Continue reading trickbot via “New fax message” malspam
This example is an email containing the subject of “Incoming high value CHAPS payments” pretending to come from HSBC but actually coming from “Olivia.Brown@hsbcemail.net” which is a look-a-like, typo-squatted or other domain th… Continue reading Trickbot via Fake HSBC “Incoming high value CHAPS payments” emails
A nice simple, straightforward Trickbot campaign hitting UK this Morning. This example is an email containing the subject of “Reference: BACS09280981 ” pretending to come from Lloyds Bank but actually coming from “O.Wilson@lloydsbankc… Continue reading trickbot via Fake Lloyds bank “Reference: BACS09280981 ” malspam emails
A bit of a change with the Trickbot delivery system with this example. Instead of directly attaching a malicious macro enabled word doc or other Microsoft Office file to the email, it instead has a html attachment and a link in the email body that whe… Continue reading Trickbot via Fake Bank Of America Secure Message