A new malspam campaign has been discovered delivering Aurora Stealer through inquiries targeting Hotel Companies. Aurora Stealer is an information-stealer with remote access capabilities.
Read more
We observed a spam campaign that has been using Microsoft-related templates such as Office 365 and SharePoint notifications to spread new malware since September 2021. Along with usual lures like COVID-19, these spam emails trick users to open malicious HTML attachments or click malicious links, both of redirects unwitting users to download a malicious XLS file.
Read more
As the pandemic continues to rage across the world, supermarkets adapted to create their own online delivery platforms to meet their customers' needs. One particular service is the Instacart, a US-based grocery company that operates a delivery and pick up service.
Read more
Scammers are targeting video conference apps users as they try to lure victims into their schemes. In this particular spam campaign, scammers are sending messages purportedly alerting recipients on a zero-day vulnerability on the video conferencing app Zoom.
Read more
In a campaign we observed at the beginning of September 2020, spammers have aimed to spread tech support scams via email. The spammed message, which claims to come from a senior manager at Trend Micro, purports to be an automatic debit for a Trend Micro subscription.
Read more
A new wave of bitcoin extortion spam is making its way to educational institutions. Written in Filipino, it contains a threatening message depicting how the scammer was able to hack the victim's computer and webcam through malware that can remain hidden against the victim's antivirus software.
Read more
An observable spike of spam samples attempting to phish Wells Fargo users in June 2020. This spam campaign unusually uses .
Read more
While the pandemic continues to affect millions of lives, spammers have continued to use COVID-19 as subject to lure recipients. In a campaign we have observed from March to June 2020, spammers aimed to spread Lemon Duck cryptocurrency-mining malware.
Read more
A spam campaign called the Love Letter has been discovered by security researchers. It is used in the delivery and distribution of the Nemty ransomware while disguising itself to appear like it is a message from a secret lover to a clueless victim.
Read more
EMOTET tries to amplify the scare by using the nCov 2019 virus outbreak in its latest spam campaign. Messages in Japanese and containing the EMOTET payload are sent to victims lured into opening the malicious document attachment by disguising as a notice for preventive measures against the spreading virus.
Read more