The Locky ransomware spam campaign appears to be in full force as we find not just one but two new samples of Locky-ridden spammed mails in this report. The first one arrives with the subject 'Emailed Invoice - [Random Number]' while the second one comes with the subject 'New Doc [yyyy-mm-dd] - Page [Random Number]' - subjects brief and terse enough that anyone unware might mistake them as casual business communication and thus legitimate.
Read more
Trojan Powmet are arriving as attachments to invoice and efax-related emails. In spoofed invoice mails, .
Read more
Ransomware is a common malicious attachment found in spam mail campaigns. In this particular instance, we found samples of two new spam campaigns sporting Locky ransomware making the rounds.
Read more
Fake voicemail email notifications with malicious attachments and/or links appear to be in vogue with cybercriminals today, as our engineers have begun to receive samples of this type of spam campaign. Upon further analysis, each one leads to ransomware infection - specifically, Locky ransomware.
Read more
A fake invoice spoofing Amazon Marketplace is spreading Locky ransomware. The email contains a message thanking the recipient for their purchase and refers to an attached invoice as proof of purchase.
Read more
Fake emails spoofing Herbalife are infecting users with malicious code. The email is an acknowledgement of purchase that includes an attached tax invoice.
Read more
Another fake online bill has been spotted and the sample we found is posing to be from a British telecommunications company. The spammed message deceives its recipients by making the email look credible and familiar enough through the company's similar template.
Read more
A spam campaign has been discovered to be leveraged by ransomware authors to deceive unwitting users. The spammed message is using the popularity of online shopping giant Amazon to send the recipient a bogus order email that contains various URLs.
Read more
A spam message that contains ransomware-related URLs has been spotted to make rounds in unsuspecting users' inboxes. The said spam poses to be an email invoice asking the user to click on the URLs to view a PDF copy of his/her personal invoice.
Read more
An email with the subject 'Emailed Invoice - [random_number]' using a random name claiming to be from the recipients domain is spreading Locky ransomware. The spam campaign uses a new technique to deliver ransomware through an attached html file.
Read more