Collaborate Disseminate
We have had a break from Trickbot hitting the UK in last week or so, that generally means that the criminals are experimenting with new delivery systems. The reappearance on Monday 25 June 2018 confirms this. I am not sure how successful this new sys… Continue reading Fake Barclays Secured Message: New Message Received delivers Trickbot via CVE-2018-8174
New Security Current report compiles advice and recommendations for endpoint security solutions from 13 CISOs across a variety of industries Hear why CISOs recommend application isolation for endpoint security protection See the value application isola… Continue reading Get the Report: CISO Recommendations for Endpoint Security by Security Current
It is Freaky Friday again today. The Locky gang must be having a long weekend off and left the apprentice in charge. They have made a bit of a mess up of encoding the files today and the so called 7z attachment is actually a base64 file that needs decoding … Continue reading → Continue reading Locky Freaky Friday Your Remittance Advice with base64 encoded attachments to emails instead of zip files
The 3rd version I have seen today in these never ending series of Locky downloaders has gone back to a traditional zip ( 7z) attachment containing a vbs file. This is an email pretending to be an Office 365 Invoice with the subject of Invoice pretending to come from the … Continue reading → Continue reading Fake Office 365 invoice delivers Locky ransomware
Ransomware called IKARUSdilapidated is managing to slip into unsuspecting organizations as an unknown file.
Continue reading Locky Ransomware Variant Slips Past Some Defenses
Continuing with the never ending series of malware downloaders is an email with the subject of Voicemail From 845-551-#### at 9:35AM pretending to come from Microsoft Voice <MSVoice@your own email domain> downloads Emotet banking Trojan They use email addresses and subjects that will entice a user to read the email and open … Continue reading → Continue reading fake Microsoft Voice Voicemail From 845-551-#### at 9:35AM malspam delivers Emotet banking Trojan
Continuing with the never ending series of malware downloaders pretending to be a payment receipt or a receipt is an email with the subject of Receipt 21426 coming or pretending to come from donotreply@random email addresses with a zip attachment containing a .vbs file that delivers globe ransomware. The zip name corresponds with … Continue reading → Continue reading more fake receipts and payment receipt emails deliver globe ransomware
The next in today’s Dridex downloaders is an email with a subject saying something like “Emailing: PIC9744891.JPG” ( random numbers and file extensions. Either Gif, JPG, Tiff, Png or any other image or doc file extension). They all come from random senders. The zip attachment extracts to another zip file … Continue reading → Continue reading Emailing: PIC9744891.JPG malspam delivers Dridex
The next in the never ending series of Locky downloaders is an email with the subject of Your shipment coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with shipment_ containing a … Continue reading →
The next in the never ending series of Locky downloaders is an email that pretends to be about proofreading the technical document you sent with the subject of Please verify coming as usual from random companies, names and email addresses with … Continue reading →
Continue reading I have proofread the technical document you sent malspam delivers Locky