Comments

spoofed Lloyds Bank Important Account Documents malspam delivers Trickbot banking Trojan — 2 Comments

  1. Just received a similar email from “noreply@lloydsbanksecure.co.uk” with a link to download the word document from lloydsbankdocs.co.uk.
    Almost a year since this was first reported and Lloyds hasn’t managed to shut it down… congrats!

  2. These change daily. Today’s version is described here https://myonlinesecurity.co.uk/fake-lloyds-bank-fw-incoming-bacs-documents-delivers-trickbot-via-fake-adobe-plugin/
    The previous registration of lloydsbanksecure.co.uk was expired and it was registered again this morning by the criminals
    I don’t know why Lloyds or other banks don’t take over the registration of these and keep them registered to stop the scammers. What generally happens is that the registrar cancels the domain as fraudulent but that cancellation on lasts for a period of time ( I think 2 years) & they become available again to start the whole saga every time

Leave a Reply

Your email address will not be published. Required fields are marked *