Category Archives: Malware

Identity Issue #PP-157-925-950-801 – spoofed Paypal – fake PDF malware

My Online Security Posted on by  

Email pretending to come from PayPal  with subject: Identity Issue #PP-157-925-950-801 We are writing you this email in regards to your PayPal account. In accordance with our “Terms and Conditions”, article 3.2., we would like to kindly ask you to confirm your identity by completing the attached form. Please print this form and fill in the requested information. Once you have filled out all the information on the form please send it to verification@paypal.com along with a personal identification document (identity card, driving license or international passport) and a proof of address submitted with our system ( bank account statement … Continue reading →

Urgent court notice CH#38213 – fake word doc – malware

My Online Security Posted on by  

A new Urgent court notice has started its spam run with emails spoofed to pretend to come from a law firm. They have now changed and are using McDermott,Will and Emery as the law firm and Chicago as the court. This follows on from https://myonlinesecurity.co.uk/spoofed-lw-com-notice-of-appearance-in-court-no8780-fake-word-doc-malware/ and https://myonlinesecurity.co.uk/notice-appearance-court-wa6142-fake-word-doc-malware/ It also pretends to be from a large international group of lawyers (mwe.com)  with a notice to appear. Various slightly different subjects on this email along with different times and dates of the alleged hearing. Also a different court clerk’s name is used, just to vary it a bit. Hearing of your case in Court CH#37713 < … Continue reading →

Notice of appearance in court WA#6142 – fake Word doc malware

My Online Security Posted on by 6

A new Notice of appearance in court  has started its spam run with emails spoofed to pretend to come from a law firm. They have now changed and are using Hogan Lovells as the law firm and Washington as the court again This follows on from https://myonlinesecurity.co.uk/spoofed-lw-com-notice-of-appearance-in-court-no8780-fake-word-doc-malware/ It also pretends to be from a large international group of lawyers (hoganlovells.com)  with a notice to appear. various slightly different subjects on this email along with different times and dates of the alleged hearing. Also a different court clerk’s name is used, just to vary it a bit. Hearing of your case in Court … Continue reading →

Cryptolocker ransomware has ‘infected about 250,000 PCs’ – BBC News report

My Online Security Posted on by  

A virulent form of ransomware called cryptolocker ransomware has now infected about quarter of a million Windows computers, according to a report by security researchers. Cryptolocker ransomware  scrambles users’ data and then demands a fee to unencrypt it alongside a countdown clock. Dell Secureworks said that the US and UK had been worst affected. It added that the cyber-criminals responsible were now targeting home internet users after initially focusing on professionals. The firm has provided a list of net domains that it suspects have been used to spread the code, but warned that more are being generated every day. Ransomware … Continue reading →

Notice of appearance in court No#8780 – fake Word doc malware

My Online Security Posted on by 1

Following on from https://myonlinesecurity.co.uk/spoofed-hearing-of-your-case-in-court-nr7546-fake-word-doc-malware/ Emails spoofed to pretend to come from a law firm. they have now changed and are using Latham and Watkins as the law firm and New York as the court It also pretends to be from a large international group of lawyers (lw.com)  with a notice to appear. various slightly different subjects on this email along with different times and dates of the alleged hearing. Also a different court clerk’s name is used, just to vary it a bit. Hearing of your case in Court No#7713 < numbers vary > Notice to appear in court No#2240  … Continue reading →

HMRC Successful Receipt of Online Submission for Reference 6432627 – fake PDF malware

My Online Security Posted on by 1

20 Jan 2014: a new variation of this one with Notice of Underreported Income is An updated version of this is spreading today. They pretend to come from noreply@hmrc.gov.uk  or gateway.confirmation@gateway.gov.uk which of course they don’t Updated 11 August 2014: back to standard zip attachment that is an upatre style downloader that downloads the usual Zbot & crpytowall. Virus total detections 4/54 Subjects include: Your Online Submission for Reference 435/GB5771857 Could not process Successful Receipt of Online Submission for Reference 6432627 Could not process Submission for Reference 495/RA2374742 Notice of Underreported Income Gateway Registration Notification Receipt of Online Submission for Reference Email … Continue reading →

Australian Taxation Office – Refund Notification – fake PDF malware

My Online Security Posted on by  

Email pretends to come from Australian Tax office IMPORTANT NOTIFICATION Australian Taxation Office – 12/24/2013 After the last calculation of your fiscal activity we have determined that you are eligible to receive a refund of 6675.03 AUD. For more details please follow the steps bellow : – Right-click the link on the attachment name, and select Save Link As, Save Target As or a similar option provided. – Select the location into which you want to download the file and choose Save. – Unzip the attached file. Louis Newman, Tax Refund Department Australian Taxation Office ========================================================== It is of course … Continue reading →

Quickbooks or Sage invoice – fake PDF malware

My Online Security Posted on by 1

these are a persistent set of emails  with subjects of Quickbooks or sage invoice 4 March 2014: please see the NEW version of this  Sage engine security update   –  malware 18 March 2014  Sage Accounting Invoice #5323313 Please remit payment before 20/03/2014. For more information please check attached file (Invoice #5323313). Sage (UK) Limited North Park Newcastle upon Tyne NE13 9AA Email pretends to be from quickbooks  with the subject: Important – Payment Overdue Alternative subject:  Unpaid Invoice #98982911 Please find attached your invoices for the past months. Remit the payment by 12/23/2013 as outlines under our “Payment Terms” agreement. Thank … Continue reading →

Hearing of your case in Court NR#7546 – jonesday.com – fake Word doc – malware

My Online Security Posted on by  

This Hearing of your case in Court spoofed fake email  pretends to be from a large international group of lawyers (jonesday.com)  with a notice to appear in court. there are several  slightly different subjects on this email along with different times and dates of the alleged hearing. Also a different court clerk’s name is used, just to vary it a bit. Hearing of your case in Court NR#7713 < numbers vary > Notice to appear in court NR#2240  < numbers vary > Urgent court notice NR#34169  < numbers vary > ======================================================================================== Notice to Appear, Hereby you are notified that you have … Continue reading →

Land Registry Notification of direct debit of fees – fake PDF malware

My Online Security Posted on by  

Email pretending to come from  UK Land Registry with subject Notification of direct debit of fees Notification Number: 0994906  < numbers vary> Mandate Number: 8051704     < numbers vary> ###THIS IS AN AUTO NOTIFICATION EMAIL. DO NOT REPLY TO THE SENDER OF THIS EMAIL. IF YOU HAVE A QUERY PLEASE REFER TO THE INFORMATION BELOW ### This is notification that Land Registry will debit 258.00 GBP from your nominated account on or as soon as possible before 25/12/2013.   < amount and date varies> Details of fees that we shall be collecting by direct debit for the applications charged are now … Continue reading →