Cybercrime, new Dridex campaign via invoices and Cutwail botnet
The email xlsm attachment contacts a random link from an internal list and downloads the DLL, which starts the malware infection chain.
Cybercrime, the Dridex campaign via Freightquote is back
The email xlsm attachment contacts a random link from an internal list and downloads the DLL, which starts the malware infection chain.
Cybercrime, false Freightquote invoice conveys Dridex
The email xlsm attachment, if opened, contacts a random link from an internal list and downloads the dll, which starts the malware infection.
Cybercrime, fake DHL shipment carries Guloader campaign
The email Xz attachment contains an executable, the malware itself. This should load other payloads, but it is currently unknown what they are.
Cybercrime, Dridex conveyed by false MSC invoices
The xlsm attachment contacts a random link from an internal list and downloads the malware, a Trojan protagonist of campaigns especially with a courier theme.
Cybercrime, the invoice-themed Dridex campaign is back
The xlsm attachment, distributed by the Cutwail botnet, contacts a random link from internal list and downloads the malware.
Cybercrime, C.H. Robinson decoy of the courier-themed Dridex campaign
The xlsm attachment, distributed by the Cutwail botnet, contacts a random link from an internal list and downloads the malware.
Cybercrime, new courier-themed Dridex campaign
The xlsm attachment, distributed by the Cutwail botnet, contacts a random link from an internal list and downloads the malware.
Cybercrime, new Dridex campaign via couriers and Cutwail
Fake xlsm invoice, distributed by the botnet, contacts random links from an internal list and download the malware.
Cybercrime, AgentTesla is back with a courier-themed campaign
The GZ attachment of the email directly contains the malware (an exe file). This steals sensitive information and exfilters it via FTP.