Advertisement
Racco42

2017-08-11 Locky "Documents from <name>"

Aug 11th, 2017
1,628
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.32 KB | None | 0 0
  1. 2017-08-11: #Locky email phishing campaign "Documents from <name>"
  2. Samples: 40
  3.  
  4. Email sample:
  5. -----------------------------------------------------------------------------------------------------------------
  6. From: <Accounts@toplice.info>
  7. To: [REDACTED]
  8. Subject: Document From Monica
  9. Date: Fri, 11 Aug 2017 17:33:29 +0530
  10.  
  11. Dear Customer,
  12.  
  13. Thank you for your recent order, please find attached your invoice.
  14.  
  15. All goods are supplied subject to our standard terms and conditions,
  16. a copy of which is available on request.
  17.  
  18. Thank you once again for your order, we look forward to serving you againin the future.
  19.  
  20. Yours faithfully,
  21.  
  22. Monica
  23.  
  24. This e-mail and any files transmitted within it are private and confidential.
  25. If you are not the intended recipient, this e-mail and any attachments within
  26. it have been transmitted to you in error. You are prohibited from using,
  27. copying, distributing or otherwise using the information contained herein
  28.  
  29. Attachment: I-7082.doc
  30. -----------------------------------------------------------------------------------------------------------------
  31. - sender address is Accounts@<domain>
  32. - subject is "Document from <name>"
  33. - attached file "I-<3-4 digits>.doc" is a MS Word macro-enable file which will download malware
  34.  
  35. Download sites and malware is same in https://pastebin.com/V2FbZHXb
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement