Dragonrider Computing

Latest fake email I've received is alledgedly from O2 but of course this is untrue. The O2.com as sender is spoofed and does in fact come from sidegate{.]org and includes a file called JobResults.zip but of course it is neither a Zip or an invoice as suggested. This is more likely to be a executable file that will infect your computer with malware at the very least and could possibly encrypt your machine with ransomware to make it unusable.

As always, NEVER click a link or download a file...

Just received yet another fake and infected email, this time with a subject title of "Final HMRC VAT - VAT 100 Report" alledgedly from quickbooks, when in fact the actual sending domain is turbotaxintuit.org.

The payload is supposed to be a zip file but will more likely be an infected autoruning file that will infect your computer with malware at the very least, and may end up encrypting your machine with ransomware!

As always, NEVER click a link or download a file that is even slightly...

Latest infected fake email this week is alledgedly from Xero Billing and refers to a subscription invoice although there is no mention of the amount billed in the email.

This will no doubt be on the infected file that the scammers are trying to you to download to infect your machine. The email seems to be sent from open-e-mail {DOT} com and as seems to be the norm uses a sharepoint {DOT} com url, in this case sharepoint.com/personal/enna_lugo_stisd_###/_layouts (partial url).

As always...

The latest in a long line of fake, infected emails advising me that I have a eFax message awaiting me has turned up in my inbox today. This time it's supposedly from faxing2 {.} com and the infected files are hosted on the what is now usual sharepoint {.} com site with what seems to be an Australian  user's details: cerebralpalsysuppo-my.sharepoint.com/personal/vicki_cavalieros_####_org_au/ (Partial URL). In fact two have now arrived to two different email addresses, both with identical...

Newest fake BT Bill email going around currently. This time the domain it is supposedly being sent from is btbusiness {AT} bnetc {dot} com which is as ever, nothing to do with British Telecom. Slight change from the usual hosting of sharepoint, this time the infected files are hosted at datadirectory {dot} org which is another sign that this is fake and another attempt to infect your computer.

Latest fake, and infected, email is supposed to come from vodafone, but doesn't of course! Spoofed email address is vodafone.com but in fact is sent from vodafonestore.net which is nothing to do with the genuine mobile phone firm.

The email comes with the subject of Online Bill Manager - Your Phone Bill is ready to view and in my case my monthly bill is for 331.30 GBP which is £331.30 more than my normal (non-vodafone) mobile bill is!

The infected file is once again hosted at...

Ransomware is a type of malicious software that blocks access to the victim's data or threatens to publish or delete it until a ransom is paid.

While some simple ransomware may lock the system in a way which is not difficult for a knowledgeable person to reverse, more advanced malware uses a technique called cryptoviral extortion, in which it encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.

Read the full article at Wikipedia.

Yet another fake BT email going the rounds, NOTHING to do with BT but the email has a subject of "New BT Bill" and has all the BT logos spoofed so it looks genuine.

However, the link to download a PDF version of your bill actually points to gsfuel-my.sharepoint.com/personal/dianne_gsfuels_com_au/_layouts/15/ {partial url} and is highly unlikely to be a PDF, more like an infected file of some sort and by clicking on the link you are more likley to infect your own computer with malware...

Be aware that there are some emails floating around alledgedly from dropbox.com informing you have a Documents.zip file shared with you.

This is a fake as it comes from a domain not linked to dropbox, but dropboxmailbox {dot} com and will be an infected file.

Fireball Malware - Coming to a computer near you!

Security researchers have discovered a massive malware campaign that has already infected more than 250 million computers across the world, including Windows and Mac OS.

Dubbed Fireball, the malware is an adware package that takes complete control of victim's web browsers and turns them into zombies, potentially allowing attackers to spy on victim's web traffic and potentially steal their data.

Read more at The Hacker News website, the...