SHARE
TWEET

2016-12-05 Locky "Invoice INV0000xxxxxx"

Racco42 Dec 6th, 2016 181 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 2016-12-05 #locky email phishing campaign "Invoice INV0000xxxxxx"
  2.  
  3. Sample email:
  4. ------------------------------------------------------------------------------------------------------------------
  5. From: "Aurora vickery" <Aurora72@isaca-ecuador.org>
  6. To: aglass@packstation.de
  7. Subject: Invoice INV00005986460
  8. Date: Mon, 05 Dec 2016 22:21:16 +0330
  9.  
  10. Please find our invoice attached.
  11.  
  12. Attachment: Invoice_INV00005986460.xls
  13. ------------------------------------------------------------------------------------------------------------------
  14. - sender varies between emails
  15. - Subject is "Invoice INV0000<4-8 digits>"
  16. - Attached file "Invoice INV0000<4-8 digits>" is a Microsoft Word XLSM file with macro downloader
  17.  
  18. The URLs, malware etc... are same as in "Emailing" / "no subject" campaigns http://pastebin.com/Yf0nnyrz
RAW Paste Data
Top