another one from the current zbot runs which try to drop cryptolocker, ransomware  and loads of  other malware  on your computer   The same malware attachment is also coming in emails with subjects of: LloydsTsb processing Cheque copy enclosed               Current Virus total detections: 1/34 https://www.virustotal.com/en/file/3fb2d8543f5a126293edcb5eb1f7abc0063ef07d3e843b6741d10ee076e69db4/analysis/ MALWR Auto Analysis: https://malwr.com/analysis/MjVjYWI1MGQzYTU0NDAxOWEzNTg0OWQ1MTE1Y2M2Nzg/ This is another one of the spoofed icon files that unless you have “show known file extensions enabled“, will look like a proper PDF file instead of the .exe file it really is, so making it much more likely for you to accidentally open it … Continue reading →

This O2  your O2 bill is ready  is another one from the current zbot runs which try to drop cryptolocker, ransomware  and loads of  other malware  on your computer We also see these with subjects saying Vodaphone bill is ready,  T-Mobile bill is ready, indeed with any mobile phone operator as the subject line. This will catch out of some users who will open the zip without thinking seeing a  mobile phone bill for more than they expect. Because the amounts are reasonable in the bills, I have seen emails with the amount ranging from  £11.23 up to £28.97, all … Continue reading →

another one from the current zbot runs which try to drop cryptolocker, ransomware  and loads of  other malware  on your computer               Current Virus total detections: 8/48  https://www.virustotal.com/en/file/0243992d050946297e979c4405ae99e69521b05dd9a2ebcf92d601b77db40c12/analysis/ MALWR Auto Analysis: https://malwr.com/analysis/NzkwOTFmNDAxZWJjNDc4YTg4NjZkYzNiZTRmMjlkNTA/ This is another one of the spoofed icon files that unless you have “show known file extensions enabled“, will look like a proper PDF file instead of the .exe file it really is, so making it much more likely for you to accidentally open it and be infected. All of these emails use Social engineering tricks to persuade you to open the … Continue reading →

New Version of  /companies-house-fake-filing-warning/  spreading today. These are targeted at UK based email addresses and domains. In USA they normally are  Better Business Bureau complaints   another one from the current zbot runs which try to drop cryptolocker, ransomware  and loads of  other malware  on your computer             Current Virus total detections: 1/48  https://www.virustotal.com/en/file/35b02a4c4c8e52615ad5a40f7679bcd07765dc000bd1a58c9e45da92c9f1db22/analysis/ MALWR Auto Analysis:  https://malwr.com/analysis/N2ZmNzMxYjdkYWZiNDI4NmJkMWJlMjU3NGM5NDNkMzg/ This is another one of the spoofed icon files that unless you have “show known file extensions enabled“, will look like a proper PDF file instead of the .exe file it really is, so making it much more … Continue reading →

another one from the current zbot runs which try to drop cryptolocker, ransomware  and loads of  other malware  on your computer             Current Virus total detections:  2/42 https://www.virustotal.com/en/file/dfed38e33871cf72bc933760aa7632246447227ee80662ea2d638a23a7513c7b/analysis/ MALWR Auto Analysis:  https://malwr.com/analysis/ZGVhZDhjZWJhOWUyNGI0Njk4OTE2NTQ2NTY5MzhmNmU/ This is another one of the spoofed icon files that unless you have “show known file extensions enabled“, will look like a proper Excel file instead of the .exe file it really is, so making it much more likely for you to accidentally open it and be infected. All of these emails use Social engineering tricks to persuade you to open the attachments that … Continue reading →