Comments

Spoofed Lloyds Bank Important – Secure Bank Documents malspam delivers Trickbot banking Trojan — 3 Comments

  1. I am catching these because I am looking for base64 encoding inside attachments for the word ‘autoopen’.
    I have no idea why antivirus companies are not looking for ‘autoopen’, ‘AutoOpen’, ‘Document_Open’, ‘Workbook_Open’ and other permutations inside Office documents. I have submitted my samples to Sophos and Kaspersky. If anyone would like an introduction to base64, install python, then PM me.

Leave a Reply

Your email address will not be published. Required fields are marked *