Dragonrider Computing

Latest infected fake email this week is alledgedly from Xero Billing and refers to a subscription invoice although there is no mention of the amount billed in the email.

This will no doubt be on the infected file that the scammers are trying to you to download to infect your machine. The email seems to be sent from open-e-mail {DOT} com and as seems to be the norm uses a sharepoint {DOT} com url, in this case sharepoint.com/personal/enna_lugo_stisd_###/_layouts (partial url).

As always...

The latest in a long line of fake, infected emails advising me that I have a eFax message awaiting me has turned up in my inbox today. This time it's supposedly from faxing2 {.} com and the infected files are hosted on the what is now usual sharepoint {.} com site with what seems to be an Australian  user's details: cerebralpalsysuppo-my.sharepoint.com/personal/vicki_cavalieros_####_org_au/ (Partial URL). In fact two have now arrived to two different email addresses, both with identical...

Newest fake BT Bill email going around currently. This time the domain it is supposedly being sent from is btbusiness {AT} bnetc {dot} com which is as ever, nothing to do with British Telecom. Slight change from the usual hosting of sharepoint, this time the infected files are hosted at datadirectory {dot} org which is another sign that this is fake and another attempt to infect your computer.

Latest fake, and infected, email is supposed to come from vodafone, but doesn't of course! Spoofed email address is vodafone.com but in fact is sent from vodafonestore.net which is nothing to do with the genuine mobile phone firm.

The email comes with the subject of Online Bill Manager - Your Phone Bill is ready to view and in my case my monthly bill is for 331.30 GBP which is £331.30 more than my normal (non-vodafone) mobile bill is!

The infected file is once again hosted at...

Ransomware is a type of malicious software that blocks access to the victim's data or threatens to publish or delete it until a ransom is paid.

While some simple ransomware may lock the system in a way which is not difficult for a knowledgeable person to reverse, more advanced malware uses a technique called cryptoviral extortion, in which it encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.

Read the full article at Wikipedia.

Yet another fake BT email going the rounds, NOTHING to do with BT but the email has a subject of "New BT Bill" and has all the BT logos spoofed so it looks genuine.

However, the link to download a PDF version of your bill actually points to gsfuel-my.sharepoint.com/personal/dianne_gsfuels_com_au/_layouts/15/ {partial url} and is highly unlikely to be a PDF, more like an infected file of some sort and by clicking on the link you are more likley to infect your own computer with malware...

Be aware that there are some emails floating around alledgedly from dropbox.com informing you have a Documents.zip file shared with you.

This is a fake as it comes from a domain not linked to dropbox, but dropboxmailbox {dot} com and will be an infected file.

Fireball Malware - Coming to a computer near you!

Security researchers have discovered a massive malware campaign that has already infected more than 250 million computers across the world, including Windows and Mac OS.

Dubbed Fireball, the malware is an adware package that takes complete control of victim's web browsers and turns them into zombies, potentially allowing attackers to spy on victim's web traffic and potentially steal their data.

Read more at The Hacker News website, the...

Want to keep your pc free of WannaCry? That's the malicious Ransomware that has hit the headlines on the National and International News sites recently.

First of all, make sure your Windows OS is uptodate and all security updates are installed. Still running Windows XP? Microsoft have released a Windows XP security fix available here. If your machine is too old to update to Windows 10,then this is a strongly recommended minimum fix you should apply as a matter of urgency.

More details on...

Latest in a long line of fake infected emails circulating currently has a subject of "You have received a new Bankline Secure Message" from banklinersa.co.uk. It has an attachment of SecureMessage.doc which is an infected file that will run itself if you try to view it.

As always, NEVER click on a attachment from a bank, especially when it's not your genuine bank! It's just another attempt to con you into downloading a file to infect your machine, maybe to steal your banking details, or send...