SHARE
TWEET

2017-08-11 Locky "Documents from <name>"

Racco42 Aug 11th, 2017 (edited) 88 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 2017-08-11: #Locky email phishing campaign "Documents from <name>"
  2. Samples: 40
  3.  
  4. Email sample:
  5. -----------------------------------------------------------------------------------------------------------------
  6. From: <Accounts@toplice.info>
  7. To: [REDACTED]
  8. Subject: Document From Monica
  9. Date: Fri, 11 Aug 2017 17:33:29 +0530
  10.  
  11. Dear Customer,
  12.  
  13. Thank you for your recent order, please find attached your invoice.
  14.  
  15. All goods are supplied subject to our standard terms and conditions,
  16. a copy of which is available on request.
  17.  
  18. Thank you once again for your order, we look forward to serving you againin the future.
  19.  
  20. Yours faithfully,
  21.  
  22. Monica
  23.  
  24. This e-mail and any files transmitted within it are private and confidential.
  25. If you are not the intended recipient, this e-mail and any attachments within
  26. it have been transmitted to you in error. You are prohibited from using,
  27. copying, distributing or otherwise using the information contained herein
  28.  
  29. Attachment: I-7082.doc
  30. -----------------------------------------------------------------------------------------------------------------
  31. - sender address is Accounts@<domain>
  32. - subject is "Document from <name>"
  33. - attached file "I-<3-4 digits>.doc" is a MS Word macro-enable file which will download malware
  34.  
  35. Download sites and malware is same in https://pastebin.com/V2FbZHXb
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
Top