Trickbot Malware Now Targets US Banks
Researchers with IBM and Flashpoint warn the Trickbot Trojan is growing more potent and now targeting U.S. banks. Continue reading Trickbot Malware Now Targets US Banks
Category Archives: WSF
A busy day with necurs botnet mass malspamming multiple Trickbot campaigns and Jaff ransomware thrown into the mix
Today has been really busy with a constant stream of malware emails coming from the Necurs botnet delivering either Trickbot banking Trojan or Jaff ransomware. They also found time to send a mass pump & dump stock spam campaign. They have used a variety of subjects including: Invoice PIS2295808 ( random … Continue reading → Continue reading A busy day with necurs botnet mass malspamming multiple Trickbot campaigns and Jaff ransomware thrown into the mix
more invoice malspam delivers malware using wsf files
Continuing with the never ending series of malware downloaders is an email with the subject of Invoice PIS0120650 ( random numbers) coming or pretending to come from NoReplyMailbox @ random companies, names and email addresses with a zip attachment which matches the subject , that contains another zip file, containing a WSF file which eventually … Continue reading → Continue reading more invoice malspam delivers malware using wsf files
Fake Anna Mills Baby Bottles Wholesale Limited Copy Credit Note malspam delivers malware
Continuing with the never ending series of malware downloaders is an email with the subject of Copy Credit Note coming or pretending to come from Anna Mills anna.mills@ random email addresses with a semi-random named zip attachment which contains another zip file which delivers a wsf file eventually delivering what looks like … Continue reading → Continue reading Fake Anna Mills Baby Bottles Wholesale Limited Copy Credit Note malspam delivers malware
Locky Ransomware, Kovter Click-Fraud Malware Spreading in Same Campaigns
Locky ransomware and Kovter click-fraud malware are being spread in the same email campaign for the first time, with malicious .lnk files being used to infect computers. Continue reading Locky Ransomware, Kovter Click-Fraud Malware Spreading in Same Campaigns
Please find attached invoice no: 9233713731 malspam delivers Locky
The next in the never ending series of Locky downloaders is an email with the subject of Please find attached invoice no: 9233713731 ( random numbers) pretending to come from documenbt at your own email domain with a random named … Continue reading →
Continue reading Please find attached invoice no: 9233713731 malspam delivers Locky
INVOICE 0501 ATTACHED -Thank you for your business malspam delivers even more Locky
The next in the never ending series of Locky downloaders is a blank / empty email with the subject of INVOICE 0501 ATTACHED -Thank you for your business ( random invoice numbers) coming as usual from random companies, names and … Continue reading →
Continue reading INVOICE 0501 ATTACHED -Thank you for your business malspam delivers even more Locky
more malspam invoice emails deliver Locky
The next in the never ending series of Locky downloaders is an email with the subject of FOM Invoice 086853 ( random 3 letter prefix and then random numbers after the invoice ) coming as usual from random companies, names … Continue reading →
malspam email part 4 as promised delivers Locky
The next in the never ending series of Locky downloaders is an email with the subject of part 4 ( random numbers between 0 & 9 ) coming as usual from random companies, names and email addresses with a random named zip … Continue reading →
Continue reading malspam email part 4 as promised delivers Locky
blank malspam email DSCF6693.pdf delivers Locky
The next in the never ending series of Locky downloaders is a totally blank email with the subject of DSCF6693.pdf ( random numbers) coming as usual from random companies, names and email addresses with a semi-random named zip attachment starting with … Continue reading →
Continue reading blank malspam email DSCF6693.pdf delivers Locky