These emails seem to be coming in with just a title indicating some kind of To Do list (“To Do”, “Your-To-do-List 7/8/2025”, etc). There is no email body/content. They have a single SVG “image” file as an attachment (“List.svg”, “ToDoList.svg”, etc). User Actions Path A user opens the SVG file, and then the SVG file …
Category Archives: Spam Email Breakdowns
DocuSign Phishing
Over the last week or so I’ve received two batches of slightly different DocuSign phishing attempts. They are typical “click a link in the email that downloads a malicious .doc you have to enable macros in” attacks, though the first time I’ve seen DocuSign as the bluff. Also somewhat interesting that these attacks seem to …
RE: OUTLOOK WEB NOTICE
Today a client received an email with the following contents: From: O’Malley, Mary Sent: Tuesday, September 13, 2016 1:24 AM Subject: OUTLOOK WEB NOTICE Your password Will Expire In {2} Days Current Faculty and Staff Should Log On To IT WEBSITE<http://xprs.imcreator.com/free/outlookweb/outlookexchange> To Validate Your E-mail.
Donation of $ 1.5 million Dollars!
Yesterday I received an email titled “Donation of $ 1.5 million Dollars!” from “Chris Colin & Weir <rigobertoerazo@idsn.gov.co>” that contained the following: My wife and I have awarded you with a donation of $ 1.5 million Dollars from part of our Jackpot Lottery of 161,653,000 Million Pounds, send your name,address, phone for claims. View http://www.bbc.co.uk/news/uk-scotland-glasgow-west-18801698 …
[DOMAIN]_contract
The following email was received by a client (email domain redacted to “<DOMAIN>”), with an attachment named “<DOMAIN>_contract.doc”: From: jiazw@neusoft.com [mailto:jiazw@neusoft.com] Sent: Wednesday, July 13, 2016 9:29 AM To: <EMPLOYEE NAME> Subject: Re: <DOMAIN> contract I have attached our contract. Please check it and let me know if you want to add any changes. Thank …