Showing posts with label DOC. Show all posts
Showing posts with label DOC. Show all posts
Tuesday, 18 July 2017

Malware spam: UK Fuels Collection / "invoices@ebillinvoice.com"

›
This fake invoice comes with a malicious attachment: From :    invoices@ebillinvoice.com Date :    18 July 2017 at 09:37 Subject :   ...
Thursday, 11 May 2017

Malware spam with "nm.pdf" attachment

›
Currently underway is a malicious spam run with various subjects, for example: Scan_5902 Document_10354 File_43359 Senders are random,...
Thursday, 27 April 2017

Malware spam: Scotiabank / "Secure email communication" / Secure.Mail@scotiabankmail.com

›
This fake financial spam leads to malware: From :    ScotiaBank [Secure.Mail@scotiabankmail.com] Date :    27 April 2017 at 14:13 Subje...
Wednesday, 19 April 2017

Malware spam: "Copy of your 123-reg invoice" / no-reply@123-reg.co.uk

›
This fake financial spam does not come from 123-Reg (nor is it sent to 123-Reg customers). It has a malicious attachment. From     no-r...
Monday, 17 April 2017

Malware spam: "RE: RE: ftc refund" / secretary@ftccomplaintassistant.com

›
This fake FTC email leads to malware. Curiously, it was sent to a company that received a multimillion dollar FTC fine, but this is almost...
Thursday, 13 April 2017

Malware spam: "Company Documents" / WebFilling@companieshousemail.co.uk and companieshouseemail.co.uk plus others

›
This spam email does not come from Companies House, but is instead a simple forgery with a malicious attachment: From:    Companies House...
Monday, 19 December 2016

Malware spam: "Payslip for the month Dec 2016." leads to Locky

›
This fake financial spam leads to Locky ransomware: From :    PATRICA GROVES Date :    19 December 2016 at 10:12 Subject :    Payslip f...
Monday, 12 December 2016

Malware spam: "New(910)" leads to Locky

›
This spam leads to Locky ransomware: From :    Savannah [Savannah807@victimdomain.tld] Reply-To :    Savannah [Savannah807@victimdomai...

Malware spam: "Invoice number: 947781" leads to Locky

›
This fake financial spam comes from multiple senders and leads to Locky ransomware: From :    AUTUMN RHINES Date :    12 December 201...
Wednesday, 2 November 2016

Malware spam: "Companies House - new company complaint" / noreply@companies-house.me.uk / noreply@companieshouses.co.uk leads to TrickBot

›
This fake Companies House spam leads to TrickBot malware : From :    Companies House [noreply@companieshouses.co.uk] Date :    2 Novemb...
Friday, 2 September 2016

Malware spam: "Scanned image from MX2310U@victimdomain.tld" leads to Locky

›
This fake document scan appears to come from within the victim's own domain, but this is just a simple forgery. Attached is a maliciou...
Monday, 15 August 2016

Malware spam: "Jen [Jen@purple-office.com]" / "Documents from Purple Office - IN00003993"

›
These fake financial documents have a malicious attachment: From :    Jen [Jen@purple-office.com] Date :    15 August 2016 at 14:10 Sub...

Malware spam: "Emma Critchley (emmacritchley@advantage-finance.co.uk)" / "Emailing - 9104896607509"

›
This fake financial spam has a malicious attachment. It does not come from Advantage Finance but is instead a simple forgery. Subject :...

Malware spam: "orderconfirmation@esab.co.uk" / "Order Confirmation-7069-2714739-20160815-292650"

›
This fake financial spam does not come from ESAB but is instead a simple forgery with a malicious attachment. From :    orderconfirmat...
6 comments:
Thursday, 11 August 2016

Malware spam: "New Doc" / "Scanned by CamScanner" / "Sent from Yahoo Mail on Android"

›
This spam has a malicious attachment: From :    Ashley [Ashley747@victimdomail.tld] Date :    11 August 2016 at 11:13 Subject :    New ...
Thursday, 4 August 2016

Malware spam: "Emailing: Sheet / Document / Invoice" with a .docm leads to Locky

›
This malware-laden spam comes with a variety of subjects, for example: Emailing: Invoice (79).xls Emailing: Sheet (189).doc Emailing: Sh...
5 comments:
Wednesday, 27 July 2016

Malware spam: "Sent from my Samsung device" leads to Locky

›
This spam comes in a few different variations: From :    Lottie Date :    27 July 2016 at 10:38 Subject :    scan0000510 Sent from my S...
Monday, 25 July 2016

Malware spam: "Emailing: Photo 25-07-2016, 34 80 10" / "Emailing: Document 25-07-2016, 72 35 48"

›
This spam appears to come from various senders within the victim's own domain, but this is a simple forgery. It has a malicious attach...
Tuesday, 19 July 2016

Malware spam: "Documents from work." / "Untitled(1).docm" leads to Locky

›
This rather terse spam appears to come from the victim themselves (but doesn't). It has a malicious attachment. From : recipient@vic...
5 comments:
Monday, 18 July 2016

Malware spam: "Image data has been attached to this email." / "Scanned image"

›
This spam is presumably meant to have a malicious attachment, but all the samples I have seen are malformed: From :    support398@victi...