MX Lab is intercepting quite a lot of viruses these days. Since October 27th, 2009, when we reported about the “Facebook Password Reset Confirmation“-campaign, we notice an serious increase in viruses. We have now a…
After a virus campaign, MX Lab now also intercepts a phishing campaign targetting Facebook users. The From address is obviously fake and not related to Facebook in any way. This email in particular was directing…
MX Lab is intercepting a large amount of emails regarding a DHL tracking error with an attached Bredolab trojan. The emails are from Manager Lucinda Poe <[email protected]>, where the name of the person is choosen…
MX Lab detected a new Bredolab variant masking itself as the “Facebook Password Reset Confirmation”. The From address in the email is shown as “The Facebook Team <[email protected]>” but the real SMTP from address is…
MX Lab intercepted some messages coming from the Microsoft Update Center <[email protected]>, an emailaddress that is obviously spoofed, with subjects like: * Install Update for Microsoft Outlook * Microsoft has released an update for Microsoft…
MX Lab is intercepting phishing messages that target PayPal users. The email comes from the spoofed address “Pay Pal.Inc” <[email protected]> with the subject “Confirm refund request - Identity Verification”. The contents of the email: Dear…
Follow the MX Lab tweets on Twitter at http://twitter.com/mxlab/. Stay up to date with the latest news regarding email security in general.
MX Lab keeps on intercepting Bredolab variants where the DHL tracking story is present in the email. The From address is Manager Reinaldo Pelletier <[email protected]>. The name of the person is choosen randomly and can…
My company Pixel Design and MX Lab received today a letter from Ondernemings-Portaal België, in Dutch, regarding our presence on their business portal http://www.ondernemings-portaal-belgie.be or http://www.portail-des-entreprises-de-belgique.be/. The way this company works is more or less similar…
MX Lab intercepted some messages with the subject line “Conflicker.B Infection Alert” coming from “Microsoft Windows Agent” but with a spoofed from address. The virus is known as Trojan-Downloader:W32/Fakerean.AG (F-Secure, Microsoft), W32/FakeAlert.SYY!tr.dldr (Fortinet) or Mal/EncPk-KP…
