Showing posts with label Dyre. Show all posts
Showing posts with label Dyre. Show all posts
Thursday, 13 April 2017

Malware spam: "Company Documents" / WebFilling@companieshousemail.co.uk and companieshouseemail.co.uk plus others

›
This spam email does not come from Companies House, but is instead a simple forgery with a malicious attachment: From:    Companies House...
Tuesday, 1 November 2016

Malware spam: "New Fax Message" / administrator@local-fax.com leads to TrickBot

›
This fake fax leads to TrickBot which appears to be similar to the Dyre banking trojan that we saw a lot of last year.. From :    Admi...
1 comment:
Monday, 14 December 2015

Malware spam: "Israel Burke" / "BCP Transportation, Inc."

›
This fake invoice comes with a malicious attachment: From :    Israel Burke [BurkeIsrael850@business.telecomitalia.it] Date :    14 Dece...
5 comments:
Thursday, 12 November 2015

Malware spam: "FYI: INTERAC e-Transfer to Guillaume Davis accepted" / "Bank of Montreal [notify@payments.interac.ca]"

›
This fake financial spam leads to malware: From :    Bank of Montreal [notify@payments.interac.ca] Date :    30 September 2015 at 13:34...
1 comment:
Wednesday, 11 November 2015

Malware spam: "Refund from Bowater Incorporated" / PayPal

›
This fake PayPal email leads to malware: From :    service@paypal.co.uk Date :    11 November 2015 at 16:27 Subject :    Refund from Bow...
Monday, 9 November 2015

Malware spam: Random Name shared "Amendment or the Agreement_09-11-2015.zip" with you

›
This fake Dropbox spam appears to come from randomly-generated people.. From :    Sandy Schmitt via Dropbox [no-reply@dropbox.com] Date ...
Friday, 6 November 2015

Malware spam: "Your latest e-invoice from TNT 4677602495 2722813" / "eInvoicing" [groupadminstubbinsDONOTREPLY@tnt.com]

›
This fake financial invoice does not come from TNT but is instead a simple forgery with a malicious attachment: From      "eInvoic...
Wednesday, 4 November 2015

Malware spam: "Email from Transport for London" / noresponse@cclondon.com

›
This fake Transport for London spam is a variation of something used before . It does not actually come from TfL, but is a simple forgery...
Wednesday, 28 October 2015

Malware spam: "Don and Carol Racine" / "www.boatclinic.net" / "boatclinic@aol.com"

›
This fake financial spam is not from Racine Design Inc but is instead a simple forgery with a malicious attachment: From     [random]...
Tuesday, 27 October 2015

Malware spam: "ZFRSSE - CMS Collateral Report(s) as of 10/27/2015" / "frs-cms-mailer@olen.frb.org"

›
This fake financial email.. whatever the heck it is pretending to be.. is not from the Federal Reserve System, but is instead a simple for...

Malware spam: "RBS Cardholder Application Form" / "Wm Palmer" [Wm.Palmer@sunderland.gov.uk]

›
This fake financial spam does not come from Sunderland City Council, but is instead a simple forgery with a malicious attachment: From ...
Friday, 23 October 2015

Malware spam: "Credit Note CN-06536 from Trump Hotels & Casino Resorts Inc. for [redacted] (2752)"

›
This fake financial spam has a malicious attachment: From :    Accounts [message-service@post.xero.com] Date :    23 October 2015 at 1...
Wednesday, 30 September 2015

Malware spam: "FW : Incoming SWIFT" / "Clyde Medina" [Clyde.Medina@swift.com]

›
This fake banking email comes with a malicious attachment: From     "Clyde Medina" [Clyde.Medina@swift.com] Date     Wed, 30...
Tuesday, 29 September 2015

Malware spam "Info from SantanderBillpayment.co.uk" / "Santanderbillpayment-noreply@SantanderBillPayment.co.uk"

›
This fake financial spam comes with a malicious attachment: From     "Santanderbillpayment-noreply@SantanderBillPayment.co.uk...
Wednesday, 23 September 2015

Malware spam: "Bankline ROI - Password Re-activation Form" / "secure.message@rbs.co.uk"

›
This fake banking spam does not come from RBS, but is instead a simple forgery with a malicious attachment: From     "RBS" [s...
Monday, 21 September 2015

Malware spam: "Your Sage subscription invoice is ready" / "noreply@sage.com"

›
This fake Sage email contains a malicious attachment. From :    noreply@sage.com [noreply@sage.com] Date :    21 September 2015 at 11:3...
1 comment:
Friday, 18 September 2015

Malware spam: "Transaction confirmation" / "donotreply@lloydsbank.co.uk"

›
This fake banking spam comes with a malicious attachment: From     donotreply@lloydsbank.co.uk Date     Fri, 18 Sep 2015 11:52:36 +0100...
Thursday, 17 September 2015

Malware spam: hrwfmailerprod@lancashire.gov.uk / REFURBISHMENT

›
This fake financial spam (presumably) comes in several different variants (I saw two): From     "Workflow Mailer" [hrwfmailer...
1 comment:

Malware spam: "Shell E-Bill for Week 38 2015"

›
This fake financial spam comes with a malicious attachment: From     [invoices@ebillinvoice.com] To     administrator@victimdomain.com ...
Wednesday, 16 September 2015

Malware spam: "Lloyds Bank - Pendeford Securities - Please Read Action Required/PI Documents/ Region code East 2/ 8715811/"

›
This fake Lloyds Bank spam comes with a malicious payload: From :    RSTNAME} Crabtree [Chang.Crabtree@lloydsbankcommercial.com] Date ...