Warning! Another Fake "incoming eFax" email

Warning! Infected emailYet another version of an infected email alledgedly from efax{.}com, but in fact sent from ffax{.}com with a request to view your fax at https a###unt.efax.com/messages/#### but in fact that is spoofed to hide the actual address of http locksmithkeycodes{.}org/file (partial urls).

What is Ransomware?

As always, NEVER click on a link in such an obviously fake email as they will not be a document as the scammers suggest, but an auto running file that will infect your computer.


Warning! Fake UPS Failed Delivery email

Warning! Fake UPS emailsFake UPS emails advising that a Delivery has failed as no one was available to sign for it are circulating. The spoofed address suggests it is from ups{AT}theupstore{.}com not ups store (only one s, even if that is a genuine domain).

The link to download the "delivery notice" is wwwapps.ups{dot}com which is also spoofed (fake) and really points to an infected file hosted on byobfranchise{.}com.

What is Ransomware?

As always, NEVER click on a link in such an obviously fake email as...


Read more: Warning! Fake UPS Failed Delivery email

Warning! Fake Quickbooks email - infected payload

Warning! Infected fake email payload,Yet another fake and infected email alledgedly sent by Quickbooks with in this case, an attached invoice for $1,449,43 though there is no explaination as to what this "invoice" in actually for! It is of course quite fake and the payload will be an infected file that will at least attempt to infect my computer with malware, and at worst, encrypt my files!

The subject is Invoice (no.) for (a domain) from esquireinteriors{.}com but suggests it a quickbook's email and the infected file is stored...


Read more: Warning! Fake Quickbooks email - infected payload

Warning! Infected Fake My O2 Business email!

Warning! Fake O2 EmailLatest fake email I've received is alledgedly from O2 but of course this is untrue. The O2.com as sender is spoofed and does in fact come from sidegate{.]org and includes a file called JobResults.zip but of course it is neither a Zip or an invoice as suggested. This is more likely to be a executable file that will infect your computer with malware at the very least and could possibly encrypt your machine with ransomware to make it unusable.

As always, NEVER click a link or download a file...


Read more: Warning! Infected Fake My O2 Business email!

Warning! Fake Quickbooks email - infected payload

Warning! Fake QuickBook emailJust received yet another fake and infected email, this time with a subject title of "Final HMRC VAT - VAT 100 Report" alledgedly from quickbooks, when in fact the actual sending domain is turbotaxintuit.org.

The payload is supposed to be a zip file but will more likely be an infected autoruning file that will infect your computer with malware at the very least, and may end up encrypting your machine with ransomware!

As always, NEVER click a link or download a file that is even slightly...


Read more: Warning! Fake Quickbooks email - infected payload

Warning! Fake "Xero Billing Notifications" infected email

Warning! Fake infected email Latest infected fake email this week is alledgedly from Xero Billing and refers to a subscription invoice although there is no mention of the amount billed in the email.

This will no doubt be on the infected file that the scammers are trying to you to download to infect your machine. The email seems to be sent from open-e-mail {DOT} com and as seems to be the norm uses a sharepoint {DOT} com url, in this case sharepoint.com/personal/enna_lugo_stisd_###/_layouts (partial url).

As always...


Read more: Warning! Fake "Xero Billing Notifications" infected email

Warning! Fake eFax message from "unknown"

Warning! Fake eFax messageThe latest in a long line of fake, infected emails advising me that I have a eFax message awaiting me has turned up in my inbox today. This time it's supposedly from faxing2 {.} com and the infected files are hosted on the what is now usual sharepoint {.} com site with what seems to be an Australian  user's details: cerebralpalsysuppo-my.sharepoint.com/personal/vicki_cavalieros_####_org_au/ (Partial URL). In fact two have now arrived to two different email addresses, both with identical...


Read more: Warning! Fake eFax message from "unknown"

Warning! Yet another Fake "New BT Bill"

Warning! Fake New BT Bill email scamNewest fake BT Bill email going around currently. This time the domain it is supposedly being sent from is btbusiness {AT} bnetc {dot} com which is as ever, nothing to do with British Telecom. Slight change from the usual hosting of sharepoint, this time the infected files are hosted at datadirectory {dot} org which is another sign that this is fake and another attempt to infect your computer.


Warning! Fake Vodafone bill email

Fake Vodafone bill email WarningLatest fake, and infected, email is supposed to come from vodafone, but doesn't of course! Spoofed email address is vodafone.com but in fact is sent from vodafonestore.net which is nothing to do with the genuine mobile phone firm.

The email comes with the subject of Online Bill Manager - Your Phone Bill is ready to view and in my case my monthly bill is for 331.30 GBP which is £331.30 more than my normal (non-vodafone) mobile bill is!

The infected file is once again hosted at...


Read more: Warning! Fake Vodafone bill email

What is RansomWare?

What is RansomwareRansomware is a type of malicious software that blocks access to the victim's data or threatens to publish or delete it until a ransom is paid.

While some simple ransomware may lock the system in a way which is not difficult for a knowledgeable person to reverse, more advanced malware uses a technique called cryptoviral extortion, in which it encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.

Read the full article at Wikipedia.