Showing posts with label OVH. Show all posts
Showing posts with label OVH. Show all posts
Tuesday 24 October 2017

Malware spam: "Order acknowledgement for BEPO/N1/380006006(2)"

›
A change to the usual Necurs rubbish, this fake order has a malformed .z archive file which contains a malicious executable with an icon t...
Tuesday 22 August 2017

Malware spam from "Voicemail Service" [pbx@local]

›
This fake voicemail leads to malware: Subject :       [PBX]: New message 46 in mailbox 461 from "460GOFEDEX" <8476446077&g...
1 comment:
Tuesday 11 April 2017

Malware spam: "Sprawdź stan przesylki DHL"

›
This spam targeting Polish victims seems quite widespread. It leads to malware. The email is personalised with the victim's real name ...
1 comment:
Friday 9 December 2016

Malware spam: "Firewall Software" leads to Locky

›
This spam appears to come from multiple senders and leads to Locky ransomware: From :    Herman Middleton Date :    9 December 2016 at ...
Tuesday 29 November 2016

Malware spam: "Please find attached a XLS Invoice 378296" / creditcontrol@somecompany.com / Ansell Lighting

›
This fake financial spam comes with a malicious attachment, purporting to come from Ansell Lighting: Subject :     Please find attached...
Friday 25 November 2016

Malware spam: "Important Information" leads to Locky

›
This spam leads to Locky ransomware: Subject :     Important Information From :     Etta Figueroa Date :     Friday, 25 November 2016, ...
Wednesday 23 November 2016

Malware spam "Please Pay Attention" leads to Locky

›
This fake financial spam leads to Locky ransomware: Subject :     Please Pay Attention From :     Bill Rivera Date :     Wednesday, 23 ...
Tuesday 22 November 2016

Malware spam: "Delivery status" leads to Locky

›
This fake financial spam leads to Locky ransomware: Subject :     Delivery status From :     Gilbert Hancock Date :     Tuesday, 22 N...
Wednesday 9 November 2016

Malware spam: "Shell Fuel Card E-bill 8089620 for Account (rnd(B,S,F,H,A,D,C,N,M,L)}}776324 08/11/2016" leads to Locky

›
This spam has an interestingly malformed subject, however the attachment leads to Locky ransomware: Subject :     Shell Fuel Card E-bil...

Malware spam: "Your Amazon.com order has dispatched" leads to Locky

›
This summary is not available. Please click here to view the post.
1 comment:
Wednesday 26 October 2016

Malware spam: "Western Union Help Desk" / "Proof" leads to Adwind

›
Just by way of a change, here's some malspam that doesn't lead to Locky.. From :    Western Union Help Desk [mes@prosselltda.cl...
Monday 3 October 2016

Malware spam: "[Scan] 2016-1003 15:26:26" / "Sent with Genius Scan for iOS." leads to Locky

›
This fake document scan leads to Locky ransomware: From :    DAMON ASHBROOK Date :    3 October 2016 at 10:56 Subject :    [Scan] 2016-...
Tuesday 27 September 2016

Malware spam: "Attached:Scan(70)" and others leads to Locky

›
This fake scanned document leads to Locky ransomware: Subject :     Attached:Scan(70) From :     Zelma (Zelma937@victimdomain.tld) To :...
Tuesday 20 September 2016

Evil network: 178.33.217.64/28 et al (evolution-host.com, customer of OVH)

›
This customer of OVH appears to be registered with fake details, and are distributing malware via a block at 178.33.217.64/28 . Currently,...
1 comment:
Tuesday 13 September 2016

Malware spam: "Attached is the tax invoice of your company. Please do the payment in an urgent manner." leads to Locky

›
This fake financial spam leads to Locky ransomware: Subject :     Tax invoice From :     Kris Allison (Allison.5326@resorts.com.mx) D...
Monday 12 September 2016

Malware spam: "Budget report" leads to Locky (and also evil network on 23.95.106.128/25)

›
This fake financial spam leads to Locky ransomware: From :    Lauri Gibbs Date :    12 September 2016 at 15:11 Subject :    Budget re...
Wednesday 7 September 2016

Malware spam: "Agreement form" leads to Locky

›
This fake financial spam leads to malware: Subject :     Agreement form From :     Marlin Gibson Date :     Wednesday, 7 September 20...
Thursday 18 August 2016

Malware spam: "The office printer is having problems so I've had to email the UPS label"

›
This fake UPS email has a malicious attachment. It appears to come from various countries UPS domains (e.g. ups.de, ups.co.uk), and from v...
Wednesday 27 July 2016

Malware spam: "Attached is the updated details about the company account you needed"

›
This spam has a malicious attachment: Subject :     updated details From :     Faith Davidson (Davidson.43198@optimaestate.com) Date ...
1 comment:
Tuesday 12 July 2016

Malware spam: "Here's that excel file (latest invoices) that you wanted." leads to Locky

›
This fake financial spam leads to Locky ransomware: From :    Benita Clayton Date :    12 July 2016 at 15:04 Subject :    Fw: hi [redac...