Dragonrider Computing

Poster supplied by Action Fraud to help spread the word to warn people.

Strange email received today alledgedly from petropackaging{dot}com with a subject of Re: FW: bill for september asking for payment of an invoice "sent last week" with a link to renegademillionairemarketing{dot}domain.

Nothing obviously attached so I assume the website linked to is infected with auto executing software to damage your computer, or encrypt your files and infect it with malware.

As always, NEVER click a link on dubious emails, especially those not addressed to you...

Just received an email apparently addressed to me, but upon closer inspection, it's addressed to the email prefix which in this case is my first name. If it had gone to a different email address, it would have been "Offer for web". The body starts off with "Just couple hours ago I saw a thing that helped me realize" and comes from a Romanian email tnet.ro and the link in the body of the email directs you to what appears to be someones personal site that deals with their family history and...

The latest fake and infected email is alledgedly from Virgin Media advising that your latest bill is ready. Of course this is fake, the email actually comes from virginmedia{dot}smebusinesslink{dot}com and the infected file that you are encouraged to download is stored as so often is the case these days, at Microsoft's my-sharepoint{dot}com website. Again with what appears to be an Australian user.

 

Of course it is not a bill, but more likely to be a php file that will run itself...

Be aware that there is a very suspicious email floating around, alledgedly from Larry Foreman Law office in the US. The one I got had a subject of Re: RE: subpoena, a worrying subject as I'm sure you would agree. Of course it's a fake and although it states that there is a Doc to view at the link within the email, it is a spoofed address that actually points to myhudson{dot}org and is not a doc file but a self running php file that will no doubt infect your computer with malware at the least...

Just received a spam infected email alledgedly from blackinbox{dot}org with the subject of Re:Salary [$1000 /week] It starts off with "I just joined the Bitc0inC0de" and goes on to offer a link to a russian website which will probably download a file to infect your computer to possibly steal your data or even encrypt your data and files requiring that you have to pay the criminals an amount of money in the hopes that you might get an unlock code.

In fact all you would be doing if you paid is...

Latest infected email includes a link to view a Video file, alledgedly! With a subject of Re: CV 678 (might differ) coming from altovivento {dot} com which in one version at least starts off "A frined of mine invested in Uber..." and the video links to a hacked word press site at pranibali{dot}com

Of course it is no such thing but more likely to be a php file that will run itself when you click the link and infect your computer, probably with a cryptlocker type infection which will cost you...

Don't know who Ring Central or moccentralusa{dot}com are supposed to be but apparently they are currently sending out multiple fake and infected emails advising you that you have a new incoming fax with a link that suggests there is a fax to download to Office. Of course it is no such thing but rather a php file that will run itself when you click the link and infect your computer, probably with a cryptlocker type infection which will cost you a LOT of money to recover, if at all, you would be...

Be aware that there is a Trojan Virus laden eMail floating around alledgedly from KashFlow. This is fake and if you click on a link, very dangerous for your computer safety.

It claims to come from kashflowpayroll{dot}com but in fact is more likely to be from payrollworkflow{dot}com.

What is a Trojan? A Trojan horse or Trojan is a type of malware that is often disguised as legitimate software. Trojans can be employed by cyber-thieves and hackers trying to gain access to users' systems...

Just visited a forum I help out on to see an Indian Spammer has tried to post infected links there with fake Hotmail and Outlook support links.

What's the betting that anyone who visits will end up with infected computers at the least and possibly encrypted files and documents at worst!

Avoid any domain that starts off with hotmailsupport247.uk/ especially if the link has a .php file extension as these can end up autorunning as you visit.

What is Ransomware?