Fake email (PCN) Parking Charge Notice from Havering London Borough


MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the notification of a parking chare note from Havering London Borough Email Reporting Service (PCN) ID: IBC/237 Email Notification Service (PCN) Record ID: NWT/99 Email Reminder Service (PCN) Record ID: MHD/611 This email is send from the spoofed addresses: The London … Continue reading Fake email (PCN) Parking Charge Notice from Havering London Borough

Fake domain name registration/extension notice leads to phishing attempt


MX Lab, http://www.mxlab.eu, started to intercept some fake domain registration/extension during the last few days, on a low volume, that clearly show that those are attempts to steal credit card information over an insecure HTTP connection. The emails are sent from addresses like: noreply@orderinformation4640.com noreply@yourcompletedorder4002.com noreply@yourreceipt2612.com noreply@yourcompletedorder6221.com The possible subjects are: FWD: Attention: Domain Registration … Continue reading Fake domain name registration/extension notice leads to phishing attempt

Fake email Belgian Federal Police “Openstaande rekening te voldoen”


MX Lab, http://www.mxlab.eu, started to intercept a fake email from the Belgiam Federal Police with the subject "Openstaande rekening te voldoen". This email is a reminder on an outstanding payment request that has already been announced in a written version by regular post in the past and contains instructions to pay an outstanding ticket for speeding in … Continue reading Fake email Belgian Federal Police “Openstaande rekening te voldoen”

Fake phishing email KBC: “Uw huidige bankkaart vervalt voor gebruik”


MX Lab, http://www.mxlab.eu, started to intercept a new malware phishing campaign by email with the subject "Uw huidige bankkaart vervalt voor gebruik". In this fake email, the reader is warned that his current banc card will expire and that a new card is available. This email is send from the spoofed address "KBC Bank <noreply@kbc.be>" … Continue reading Fake phishing email KBC: “Uw huidige bankkaart vervalt voor gebruik”

Fake email from Intrum Justitia “Uw factuur” leads to malware


MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the subject "Uw factuur". The email is fake, is written in Dutch and targets email recipients in the Netherlands and Belgium. This email is send from the spoofed address "Intrum Justitia <no_replyincasso@serverintrum.com>" and has the following body: Behandeld door : Factuur … Continue reading Fake email from Intrum Justitia “Uw factuur” leads to malware

Fake KPN email regarding invoice contains malicious URL


MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the subject "Uw factuur" towards various .be and .nl domains. This campaign has more or less the same characteristics as the campaign on the 24th March Fake email KPN regarding invoice contains trojan but the email is slightly different from lay … Continue reading Fake KPN email regarding invoice contains malicious URL

Email “Copy of Invoice(s)” contains Word file with malicious macro


MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the subject "Copy of Invoice(s)". This email is send from the spoofed address "Anny Beckley <Anny@hammondsofknutsford.co.uk>" and has the following body: Please find attached a copy of Invoice Number(s) 82105 The attached file Q_46Q0VWHU4.doc is a Word file with a malicious … Continue reading Email “Copy of Invoice(s)” contains Word file with malicious macro