Technical Discussion
>> Security Related Issues

Pages in this thread: 1 | 2 | (show all)

Print Thread

deleted
(deleted) Mon 22-Dec-14 15:49:02

Beware of "Tracy Smith-Aguaid" trojan

[link to this post]

Very convincing...I opened email as I have given to Water Aid charity in the past few months but knew something was not right.

See :- https://www.google.co.uk/search?q=tracy+smith+aquaid...

We've got to keep our wits about us even if it is the Season of Good Will !

caffn8me
(knowledge is power) Mon 22-Dec-14 17:56:16

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: deleted] [link to this post]

I've blatted a couple of these today on work accounts - before anyone else had a chance to open them and I've blocked future emails at the server with the same subject and from the same domain.

Sarah

--
If I can't drink my bowl of coffee three times daily, then in my torment, I will shrivel up like a piece of roast goat

Spiders on coffee - Badass spiders on drugs

bobble_bob
(fountain of knowledge) Mon 22-Dec-14 19:17:53

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: deleted] [link to this post]

Anything with an attachment you arent expecting you shouldnt open. Even if it looks legit if its not from someone you know AND expecting it, leave it alone

Banger
(eat-sleep-adslguide) Mon 22-Dec-14 19:18:36

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: caffn8me] [link to this post]

Had quite a few of these to different (mine) addresses. Just with card receipt doc in them.

Tim
www.vivaciti.net & freenetname
Billion 7800 on 24 Meg Enta
http://www.thinkbroadband.com/speedtest/results.html...

hypertony
(experienced) Mon 22-Dec-14 21:53:09

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: deleted] [link to this post]

We had that at work too, so did a global block to prevent these sort of email arriving to our email servers again.

It was a very well written email, even including the ending sig!

- Tony Sutton
- Check out my Ford Focus ST170 site | View my Car's Dashcam Videos

deleted
(deleted) Mon 22-Dec-14 22:53:22

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: hypertony] [link to this post]

Guess who was stupid enough to open the word document attached...................

Thankfully it was empty though very convincing

IanBB
(member) Tue 23-Dec-14 00:57:18

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: deleted] [link to this post]

It almost caught me out as I received 2 of the blighters either side of an expected Paypal receipt for cards!

deleted
(deleted) Tue 23-Dec-14 18:11:21

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: deleted] [link to this post]

IT isn't empty. I looked at it on my notebook (100% GNU/Linux here) and the document is riddled with embedded macros.

When I looked at it in LibreOffice, it refused to load them as the security settings stop macros at source unless I *explicity* allow them.

I guess you better get scanning.

Nick

deleted
(deleted) Tue 23-Dec-14 19:46:17

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: deleted] [link to this post]

My virus scanner didn't come up with anything. Just doing a spybot scan. Seems I might have hut lucky (whew)

hypertony
(experienced) Tue 23-Dec-14 23:10:56

Re: Beware of "Tracy Smith-Aguaid" trojan

[re: deleted] [link to this post]

At that time last week, Symantec didn't catch it. I had to submit the suspect file to them so they can add it to their 'Rapid Release' file as it was a new threat.

Once I applied the Rapid Release across the site, they were picked up...

- Tony Sutton
- Check out my Ford Focus ST170 site | View my Car's Dashcam Videos

Pages in this thread: 1 | 2 | (show all)

Print Thread

Jump to