Dragonrider Computing

Want to keep your pc free of WannaCry? That's the malicious Ransomware that has hit the headlines on the National and International News sites recently.

First of all, make sure your Windows OS is uptodate and all security updates are installed. Still running Windows XP? Microsoft have released a Windows XP security fix available here. If your machine is too old to update to Windows 10,then this is a strongly recommended minimum fix you should apply as a matter of urgency.

More details on...

Latest in a long line of fake infected emails circulating currently has a subject of "You have received a new Bankline Secure Message" from banklinersa.co.uk. It has an attachment of SecureMessage.doc which is an infected file that will run itself if you try to view it.

As always, NEVER click on a attachment from a bank, especially when it's not your genuine bank! It's just another attempt to con you into downloading a file to infect your machine, maybe to steal your banking details, or send...

Yet another fake and infected email circulating currently. This time alledgedly from Billing at a dental laboratory! Apparently I owe £2574 GBP, overdue since 8 days ago! I'm invited to view my bill from a link that is disguised as in.xero.com but it is of course just another method of panicing people into clicking the link and downloading infected files to their computer to steal bank details etc, or send out more fake emails to their contacts, or perhaps it's yet another file encryptor...

Infected emails circulating with a Subject of "Your Sage subscription invoice is ready". Alledgedly from sages.biz but the infected file that these scum are trying to con you into downloading is hosted at leuschke-my.sharepoint.com/personal/brian_leuschke_co_nz/_layouts/15 (partial url).

As always, check if such a link is what is expected by hovering over the link rather than clicking it, if it's not genuine, never click the link and NEVER give your financial details to a link from an email...

Latest in a run of fake banking emails received today, this time alledgedly from RBS Group stating there is a secure message to download from a link within the email.

Banks NEVER send you "Secure Messages" via a link in an email, one of the most insecure methods of sending a message, which is why the hackers like it so much! Never ever click on a link in a suspect email, it's only there to fool people into downloading infected files to their computer which send out banking details to the...

Yet another fake email, no doubt with an infected payload (Click a link and have your comptuer infected with malware!)

Subject is Reminder: Invoice INV-887 from Crowne Plaza Reading (An American hotel) with a fake domain {at} accontingquickbooks.com. Note the deliberate mis-spelling.

Very similar location of the infected file (kellercloud-my.sharepoint.com/personal/adrian_kendell_keller_com_au/_layouts/15)  as two from earlier today alledgedly from BT.

If you receive one, please...

Just had a couple of Fake BT Online Bill emails, one for £383.67 and the other for £561.09. Both alledgedly from btbusiness {at} bt.com, but spoofed from btbusiness {at} btconnect.info.

They look okay at first glance, but the link to download the bill is prmintacc-my.sharepoint.com/perso=
nal/estrella_intacc_com_au/ in both. Please pass on a warning to your friends and family, especially though who may be confused and worried enough to click on the link and download infected files to their...

Latest fake banking email arrived in my inbox today. This time alledgedly from Lloyds Bank but of course it's not, it's actually from lloydsbank-documents.com and has a 100Kb attachment that I'm asked to download and fax back. Never going to happen!

It is of course fake and the document will be infected with some malicious payload so never download from a link in a banking email, especially if you're not actually a customer of the bank supposedly involved.

Just received TWO emails alledgedly from Companies House today. These are fake and infected and actually sent by companieshousei.com (Note the i). IF these where genuine, the domain would be .gov.uk.

Both have links to infected files, one on 118enquiries.com and the other to cdaets-my.sharepoint.com/personal/nathan_martin_cdatasystems_com_au.  NEVER EVER click on links in fake emails. Simply delete from your server and never view them as sometimes the images are hosted remotely and can...

Look out for fake BT billing emails going around.

Just received one from btconnect.biz advising me that my bill amount is 967.12 GBP and to check the attached PDF.

As the email isn't addressed to me by name, plus the fact I'm NOT a BT customer, I'm pretty confident it's a fake not to mention the domain its coming from isn't actually a BT domain, it's a fake and the PDF is probably infected, I can only recommend people delete it without viewing the PDF.

You may also wish to forward the...