Dragonrider Computing

Slightly worrying infected email turned up in my inbox today! Alledgedly from The Pensions Regulator with some appaling grammer!

Declaration Deadline varies between September and August 2016 in the same email, and that I am "almost run out of time to complete your declaration of compliance!"

The email is supposedly sent from a UK government email but has been spoofed to hide the fact that it is in fact sent from ukays{dot}com and as is the usual case for these fake emails, the infected...

Still more infected  fake Xero Billing Notification emails arriving in my inbox. As seems to be the norm these days, the infected files are hosted on Microsoft's my-sharepoint.com hosting site with an apparently Australian domain being vulnerable. So many of these user storage areas seem to be hosted infected files, you have to wonder if it is a real security issue with Microsoft themselves or dozens of Australian users have very poor passwords, or are simply involved with the...

An interesting email received today with TWO spoofed links to infected files, alledgedly the same Doc, but in fact a couple of infected files that will no doubt infect your computer with malware or encrypt your files!

Both supposed to be QuickBook invoices that I've sent to this Cameron Johnson in the States, one of which is actually stored at absjoy{.}com and the other at sahomebuyerworkshop{dot}com. As I don't use or bill via QuickBooks it's definitely a fake and could even be...

Yet another fake Xero Billing Notification email going around. As seems to be the norm these days, the infected files are hosted on Microsoft's my-sharepoint.com hosting site with an apparently Australian domain being vulnerable.

As always, NEVER click on a link in such an obviously fake email as they will not be a document as the scammers suggest, but an auto running file that will infect your computer.

Yet another series of fake eFax messages received and as usual, all trying to con people into clicking the spoofed link so as to infect your computers!

Infected file supposedly available at messages.efax.com when in reality this is spoofed to hide the actual domain (convergedhealth{dot}com) hosting a self running executable file which at the least will infect your computer with malware, at worst, encrypt your files, also known as RansomWare! This particular fake email was apparently sent...

Just received yet another email alledgedly from UPS, but of course it isn't from the genuine company, but another attempt to fool people into downloading infected files!

With a subject of Delivery halted for shipment #654308

The email starts off with:

Dear customer,
 
Our courier has attempted to deliver your package today, but nobody answered the door at the destination address.
The shipping process has been interrupted and the package was delivered to our local office....

Yet another fake email alledgedly from BT this time suggesting my BT bill is for £556.27 and there is a link to download so I can view the bill. The email looks genuine when viewed in a email program, or on a smart phone, but is of course fake, the scammers just use BT's images in an attempt to fool you into viewing the infected file that will at the very least fill your computer with malware and send out infected mail to your address book, and at worst, encrypt your files!

Subject is New BT...

Yet another version of an infected email alledgedly from efax{.}com, but in fact sent from ffax{.}com with a request to view your fax at https a###unt.efax.com/messages/#### but in fact that is spoofed to hide the actual address of http locksmithkeycodes{.}org/file (partial urls).

What is Ransomware?

As always, NEVER click on a link in such an obviously fake email as they will not be a document as the scammers suggest, but an auto running file that will infect your computer.

Fake UPS emails advising that a Delivery has failed as no one was available to sign for it are circulating. The spoofed address suggests it is from ups{AT}theupstore{.}com not ups store (only one s, even if that is a genuine domain).

The link to download the "delivery notice" is wwwapps.ups{dot}com which is also spoofed (fake) and really points to an infected file hosted on byobfranchise{.}com.

What is Ransomware?

As always, NEVER click on a link in such an obviously fake email as...

Yet another fake and infected email alledgedly sent by Quickbooks with in this case, an attached invoice for $1,449,43 though there is no explaination as to what this "invoice" in actually for! It is of course quite fake and the payload will be an infected file that will at least attempt to infect my computer with malware, and at worst, encrypt my files!

The subject is Invoice (no.) for (a domain) from esquireinteriors{.}com but suggests it a quickbook's email and the infected file is stored...