The Redret domains have shifted around a little since last week, indicating perhaps more malicious activity to come. Of note, cvredret.ru and cxredret.ru are both multihomed on several IP addresses (both domains are on the same set of addresses). Those domains can be found on 91.208.181.205, 93.189.88.198, 213.193.231.210, 78.47.135.105, 78.129.233.8, 85.214.204.32, and 87.106.201.119. Changes since […]
This is a pretty common virus laden email: Subject: ACH Transfer was not accepted by our bank Dear Bank Account Operator, I regret to inform you that ACH Transfer created by you or on your behalf was not accepted by our bank. Transaction ID: 1709919126682218 Current status of transaction: on hold Please review transaction details […]
We have been recently notified of a banker malware that is being distributed in Spain. This malware, which Trend Micro detects as TROJ_BANLOD.QSPN, is reported to arrive via mass-mailed spam messages that pretend to be coming from the National Police of Spain. The email contains a link which leads to download TROJ_BANLOD.QSPN – a downloader […]
Latest Comments