SHARE
TWEET

2016-12-12 Locky "Invoice number: xxxxx"

Racco42 Dec 12th, 2016 144 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 2016-12-12: #locky email phishing campaign "Invoice number: xxxxxx"
  2. http://blog.dynamoo.com/2016/12/malwares-spam-invoice-number-947781.html
  3.  
  4. Email sample:
  5. ---------------------------------------------------------------------------------------------------------------
  6. From: KARI BARTON <KARI.BARTON@monkey-poker.net>
  7. To: [REDACTED]
  8. Subject: Invoice number: 633365
  9. Date: Mon, 12 Dec 2016 13:15:25 +0300
  10.  
  11. Please find attached a copy of your invoice.
  12.  
  13. Tel: 0800 170 7234
  14. Fax: 0161 850 0404
  15.  
  16. For all your stationery needs please visit Stationerybase.
  17.  
  18. Attachment: 633365.docm
  19. ---------------------------------------------------------------------------------------------------------------
  20. - sender varies between emails
  21. - subject is "Invoice number: <5-6 digits>"
  22. - attached file "<5-6 digits>.docm" (number same as in the subject line) is Microsoft Word file containing macro that will download the malware
  23.  
  24. Download locations, malware etc. is same as for "Attached, Copy, Emailing, File" campaign http://pastebin.com/7rvsVkSN
RAW Paste Data
Top