Another one from the current zbot runs which try to drop cryptolocker, ransomware  and loads of  other malware  on your computer. Most of these are using email addresses and subjects that are appropriate for the time of year. Currently many of the emails are either about undelivered packages or invoices or payment advice for online shopping. All subjects that we would expect to receive in emails at this time of year. The other major common subjects are: Tax returns, (where especially in UK, you need to submit your Tax Return online before 30th December each year), Airline Tickets and Holiday bookings. … Continue reading →

26 February 2014 there is an updated version of this spreading, although we haven’t yet received any copies of the emails. This blog post on We live Security has all the details British Airways Your flight ticket is not activated yet is another version of https://myonlinesecurity.co.uk/spoofed-fedex-shipping-confirmation-please-fulfil-the-documents-attached-to-verify-your-identity-now-fake-pdf-malware/ This time the “bad actors”  have jumped on the bandwagon of using a fake E-ticket as a subject, because at this time of year it seems to get a response. British Airways Your flight ticket is not activated yet is another one from the current zbot runs which try to drop cryptolocker, ransomware  and loads … Continue reading →

This email  saying Scanned Image from a Xerox WorkCentre pretends  to come from your own domain but in reality is yet another one from the current bot runs which try to drop cryptolocker, ransomware  and loads of  other malware  on your computer. They appear to come from your own domain but aren’t. We will see this sort of attempt with the increased use of web based printing and scanning. A lot of domestic devices can be set to print/scan etc from a wireless device or your cell phone and can be set to send an email to your main account … Continue reading →

Wells Fargo FW Important docs is an email pretending to come from Wells Fargo with subject FW: Important docs  and content We have received this documents from your bank, please review attached documents. Needless to say, it is a spoof & not from Wells Fargo and nothing at all to do with anything vaguely bank related. Update 18 March 2014: After a long break this one has resurfaced with exactly the same email and the subject saying FW: Activity Docs instead of FW: Important docs and a change to the attachment naming convention Update 17 June 2014; A new spam run … Continue reading →