Trusted Design

Globeimposter ransomware continues to be delivered via Necurs botnet using fake scanner or printer messages | My Online Security

概要

From My Online Security: The next in the never ending series of malware downloaders from the Necurs botnet is an email with the subject of Message from “G10PR0378651.victimsdomain.com” pretending to come from random names at your own email address or company domain. They use email addresses and subjects that will entice, persuade, scare or shock a recipient to read the email and open the attachment. Once again the criminal gang sending these have partially shot themselves in the foot, trying to be clever & bypassing filters. The attachment says it is a zip file but is actually a 7z file renamed to zip.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Malware-Traffic-Analysis.net - 2017-07-31 - malspam pushing GlobeImposter ransomware (score: 0.80)
• Necurs botnet malspam delivering a new Ransomware via fake scanner /copier messages (score: 0.74)
• Necurs Botnet malspam pushes GlobeImposter ransomware (score: 0.73)
• Necurs Botnet malspam pushes GlobeImposter ransomware (score: 0.73)
• Necurs Botnet malspam pushes GlobeImposter ransomware (score: 0.73)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る