The next in the series of today’s Locky ransomware delivery malspam emails is Documents from Purple Office – IN00051913
purple-office.com has not been hacked or had their email or other servers compromised. They are not sending the emails to you. They are just innocent victims in exactly the same way as every recipient of these emails.
The email looks like:
From: Jen < Jen@purple-office.com >
Date: Mon 15/08/2016 14:18
Subject: Documents from Purple Office – IN00051913
Please find attached invoice/credit from Purple Office.
Delivers an updated Locky ransomware version from the same locations as THIS earlier post & at least one new one ( or at least previously undiscovered) http://www.dbv-winterthur.homepage.t-online.de/HJ6bhGHV ( VirusTotal) ( MALWR) (VirusTotal)