Showing posts with label Locky. Show all posts
Showing posts with label Locky. Show all posts
Thursday, 28 September 2017

Malware spam: "Emailing: Scan0xxx" from "Sales" delivers Locky or Trickbot

›
This fake document scan delivers different malware depending on the victim's location: Subject :       Emailing: Scan0963 From :  ...
2 comments:
Tuesday, 26 September 2017

Malware spam: "AutoPosted PI Notifier"

›
This spam has a .7z file leading to Locky ransomware. From :      "AutoPosted PI Notifier" [NoReplyMailbox@redacted.tld] Subj...
Thursday, 21 September 2017

Malware spam: "Invoice RE-2017-09-21-00xxx" from "Amazon Marketplace"

›
This fake Amazon spam comes with a malicious attachment: Subject :       Invoice RE-2017-09-21-00794 From :       "Amazon Marketp...
4 comments:
Monday, 18 September 2017

Malware spam: "Status of invoice" with .7z attachment

›
This spam leads to Locky ransomware: Subject :       Status of invoice From :       "Rosella Setter" ordering@[redacted] Da...
Tuesday, 5 September 2017

Malware spam: "Scanning" pretending to be from tayloredgroup.co.uk

›
This spam email pretends to be from tayloredgroup.co.uk but it is just a simple forgery leading to Locky ransomware. There is both a mali...
Friday, 25 August 2017

Malware spam: "Voicemail Service" / "New voice message.."

›
The jumble of numbers in this spam is a bit confusing. Attached is a malicious RAR file that leads to Locky ransomware. Subject :      ...

Malware spam: "Your Sage subscription invoice is ready" / noreply@sagetop.com

›
This fake Sage invoice leads to Locky ransomware. Quite why Sage are picked on so much by the bad guys is a bit of a mystery. Subject ...
Thursday, 24 August 2017

Multiple badness on metoristrontgui.info / 119.28.100.249

›
Two massive fake "Bill" spam runs seem to be under way, one claiming to be from BT and the other being more generic. Subject ...
Wednesday, 23 August 2017

Malware spam: "Customer Service" / "Copy of Invoice xxxx"

›
This fairly generic spam leads to the Locky ransomware: Subject :       Copy of Invoice 3206 From :       "Customer Service" ...

Malware spam: "Voice Message Attached from 0xxxxxxxxxxx - name unavailable"

›
This fake voice mail message leads to malware. It comes in two slightly different versions, one with a RAR file download and the other wit...
1 comment:
Tuesday, 22 August 2017

Malware spam from "Voicemail Service" [pbx@local]

›
This fake voicemail leads to malware: Subject :       [PBX]: New message 46 in mailbox 461 from "460GOFEDEX" <8476446077...
1 comment:
Monday, 19 December 2016

Malware spam: "Payslip for the month Dec 2016." leads to Locky

›
This fake financial spam leads to Locky ransomware: From :    PATRICA GROVES Date :    19 December 2016 at 10:12 Subject :    Payslip f...
Thursday, 15 December 2016

Malware spam: "Payment Processing Problem" leads to Locky

›
This fake financial spam leads to Locky ransomware: From :    Juliet Langley Date :    15 December 2016 at 23:17 Subject :    Payment P...

Malware spam: "Amount Payable" leads to Locky

›
This fake financial spam leads to Locky ransomware: From :    Lynn Drake Date :    15 December 2016 at 09:55 Subject :    Amount Payabl...
1 comment:
Monday, 12 December 2016

Malware spam: "New(910)" leads to Locky

›
This spam leads to Locky ransomware: From :    Savannah [Savannah807@victimdomain.tld] Reply-To :    Savannah [Savannah807@victimdomai...

Malware spam: "Invoice number: 947781" leads to Locky

›
This fake financial spam comes from multiple senders and leads to Locky ransomware: From :    AUTUMN RHINES Date :    12 December 201...
Friday, 9 December 2016

Malware spam: "Firewall Software" leads to Locky

›
This spam appears to come from multiple senders and leads to Locky ransomware: From :    Herman Middleton Date :    9 December 2016 at ...
Monday, 5 December 2016

Malware spam: "Please Consider This" leads to Locky

›
This fake financial spam leads to malware: From :    Aimee Guy Date :    5 December 2016 at 13:32 Subject :    Please Consider This Dea...

Malware spam: "Emailing: _9376_924272" / "No subject" leads to ".osiris" Locky.

›
This spam comes in a few different variants, and it leads to Locky ransomware encrypting files with an extension ".osiris" The...
Tuesday, 29 November 2016

Malware spam: "Please find attached a XLS Invoice 378296" / creditcontrol@somecompany.com / Ansell Lighting

›
This fake financial spam comes with a malicious attachment, purporting to come from Ansell Lighting: Subject :     Please find attached...