Friday, 22 May 2015

Malware spam: "Your Invoice IN278577 from Out of Eden" / "sales@outofeden.co.uk"

›
This fake invoice does not come from Out of Eden Ltd but is instead a simple forgery leading to malware. From : sales@outofeden.co.uk ...

Malware spam: "This is a Remitter Advice following the submission of a payment instruction by Lloyds Bank Plc." / "Australian Taxation Office"

›
This spam doesn't seem to know if it's from Lloyds Bank or the Australian Tax Office. From :    Australian Taxation Office [no...
Thursday, 21 May 2015

Malware spam: "Travel order confirmation 0300202959" / "overseastravel@caravanclub.co.uk"

›
This fake booking confirmation (received from a contact - thanks!) does not come from the Caravan Club, but is a simple forgery with a mal...

Malware spam: "Invoice# 2976361 Attached" / "PGOMEZ@polyair.co.uk"

›
So far I have only seen one sample of this. The sender and subject may vary. From :    PGOMEZ@polyair.co.uk Date :    21 May 2015 at 08:...
Wednesday, 20 May 2015

Malware spam: "Sky.com / Statement of Account" and "Voice Mail / You have a new voice" via volafile.io

›
These two spam runs attempt to download malware from volafile.io. To give the folks at Volafile credit, all the malware I have seen linked...
Tuesday, 19 May 2015

Malware spam: "Australian Taxation Office [noreply@ato.gov.au]" / "eFax message - 2 page(s)"

›
Apparently the Australian Taxation Office thinks I have a fax.. or perhaps it is something more sinister? From :    Australian Taxation...
Monday, 18 May 2015

Malware spam: "Your reasoning stands in need" / "Have a need in your thought" / "In want of your concern"

›
This fake financial spam run is similar to this one last week , and comes with a malicious attachment. From :    Aida Curry Date :    ...
Wednesday, 13 May 2015

Malware spam: "Need your attention,''Important notice" / "Financial information" / "Important information"

›
This mix of spam messages come with a malicious attachment: From :    Johnny Higgins [JohnnyHigginsyb@mail.whitsoncm.com] To :    ...
Tuesday, 12 May 2015

Malware spam: "ATTN: Outstanding Invoices - [4697E0] [April|May]"

›
This spam comes with random senders and reference numbers, but in all cases includes a malicious attachment: From :    Debbie Barrett D...
2 comments:

Malware spam: "Copy of your 123-reg invoice ( 123-015309323 )" / "no-reply@123-reg.co.uk"

›
This fake invoice is not from 123-reg, but is instead a simple forgery with a malicious attachment: From :    no-reply@123-reg.co.uk D...
Monday, 11 May 2015

Malware spam: "Payment details and copy of purchase [TU9012PM-UKY]"

›
I haven't really had time to analyse this, so I am using the analysis of an anonymous source (thank you).. From :    Kristina Prest...
Wednesday, 6 May 2015

Malware spam: "Email from Transport for London" / "noresponse@cclondon.com"

›
This spam does not come from Transport for London, but is instead a simple forgery with a malicious attachment. From :    noresponse@cc...
Thursday, 30 April 2015

Nepal Earthquake scam: savenepal.org

›
I was tipped off to this site by a contact, but it appears that there are some particularly dispicable scammers who have registered a fake w...

Malware spam: "Rebecca McDonnell [rebecca@gascylindersuk.co.uk]" / "Telephone order form"

›
This fake financial email is not from Gas Cylinders UK but is instead a simple forgery with a malicious attachment. From :    Rebecca ...
1 comment:
Wednesday, 29 April 2015

cnwebregistry.cn / chinaygregistry.com scam and "Huayu Ltd"

›
This spam email is actually part of a long-running Chinese scam. From :    Jim Bing [jim.bing@cnwebregistry.cn] Date :    29 April 201...
16 comments:
Tuesday, 28 April 2015

Malware spam: "INVOICE PD Will Comm" / "richard will [contactwill@hotmail.com]"

›
This malicious spam does not come from Will Communications but is instead a simple forgery with a malicious attachment. From :    rich...
Monday, 27 April 2015

Malware spam: "[1138593] Booking.com Invoice 01/03/2015 - 31/03/2015" / "invoice@booking.com"

›
This fake invoice email does not come from Booking.com but is a simple forgery with a malicious attachment. From :    invoice@booking.c...
Friday, 24 April 2015

Malware spam: "Pidwell, Nigel [nigel.pidwell@ssecontracting.com]" / "Western Order"

›
The spam email is not from SSE Contracting, but is instead a simple forgery with a malicious attachment: From :    Pidwell, Nigel [nigel...
2 comments:

Malware spam: "Colin Fox [colin@nofss.co.uk]" / "Invoice 519658"

›
This spam is not from Norwich Office Supplies but is instead a simple forgery. They have not been hacked (even if their website says they...
2 comments:
Thursday, 23 April 2015

Malware spam: "Refund on order 204-2374256-3787503" / "Amazon.co.uk [payments-messages@amazon.co.uk]"

›
This fake Amazon spam comes with a malicious attachment: From :    Amazon.co.uk [payments-messages@amazon.co.uk] Reply-To:    "Ama...
2 comments: