Security News > 2020 > December > Massive Subway UK phishing attack is pushing TrickBot malware
2020-12-11 08:41
A massive phishing campaign pretending to be a Subway order confirmation is underway distributing the notorious TrickBot malware.
TrickBot is a trojan malware infection commonly distributed through phishing campaigns or installed by other malware.
What is concerning about these phishing emails is that they include the user's first name, and some users are reporting they are being sent to emails only used for Subway.
This attack may indicate a data breach at Subway UK that allowed the threat actors to gain access to customer's names and email addresses.
The Subway phishing emails are using email subjects such as "Your order is being processed" and "We've received your order," and state that it is from Subcard, as shown below.
News URL
Related news
- WP3.XYZ malware attacks add rogue admins to 5,000+ WordPress sites (source)
- Medusa ransomware group claims attack on UK's Gateshead Council (source)
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- IPany VPN breached in supply-chain attack to push custom malware (source)
- MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- Cyber Attack Severity Rating System Established in UK (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)