![]() ![]() ![]() 7z: decoded from base 64 and Extracts to: Invoice IP8729962. the same email as last Friday* with the subject of 'Your Remittance Advice' pretending to come from accounts random email addresses and companies.Ĥ3699 Remittance. com: 199.30.241.139: įake 'Remittance Advice' SPAM - delivers Locky The basic rule is NEVER open any attachment to an email, unless you are expecting it."Īsheardontheradiogreens. com/uywtfgh36?” (virusTotal 14/66) (Payload Security). This particular VBS has these URLs hardcoded (there will be loads of others) 7z: decoded from base 64 and Extracts to: 872042 Remittance. encoding the files today and the so called 7z attachment is actually a base64 file that needs decoding to get the 7z file, before extracting the VBS.Ħ2046_Remittance. an email with the subject of 'Payment history' pretending to come from accounts random email addresses and companies. The basic rule is NEVER open any attachment to an email, unless you are expecting it."įake 'Payment history' SPAM - delivers Locky DO NOT follow the advice they give to enable macros or enable editing to see the content. This email -attachment- contains a genuine word doc with a macro script that when run will infect you. ![]() png which of course is -not- an image file but a renamed. SecureMessage.doc - Current Virus total detections 10/59*. Reading in plain text or using view source, shows the content. there is a slight formatting problem in Outlook, where the emails arrive with a -blank- body. ![]() "An email with the subject of 'Important – Payment Advice' pretending to come from HSBC but actually coming from a look-a-like domain HSBC or HSBC with a malicious word doc attachment is today’s latest spoof of a well-known company, bank or public authority delivering Trickbot banking Trojan. Fake 'Payment Advice' SPAM - delivers Trickbot ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |