'CTM Arrangment' Scam Distributes Malware

malware

A new scam is being pushed online, spread through malicious spam emails. Its name is simply the "CTM Arrangment" scam.

The scam would seem to be targeting corporations and businesses. The malicious email is signed using the name of a legitimate company, even though the scam obviously has nothing to do with the legitimate entity called "JPS Ships Supply Service" - a Lithuanian supply vessel company.

The scam email reads as follows:

Subject: ARRANGMENT CTM OF USD 124,000

Dear sir,

Please be informed that we are planning to arrange CTM of USD 124,000.
Please find attached Masters breakdown request and also revert with your
handling charges and banking details .

Appreciate your prompt reply

BRGDS
UAB "JPS Ships Supply Service"
24/7 Mobile +37065208835
Tel +370 (46)-344865 /-461006
Fax +370 (46) 340960
E-Mail: -
E-Mail: -
Web: -


The email contains a malicious attachment in the form of a Microsoft Office Excel file. The file contains the payload used in the scam, namely - the LokiBot trojan horse.

Be very careful with unsolicited emails that end up in your inbox and never open attachments in emails you don't expect.

November 11, 2022
Loading...

Cyclonis Backup Details & Terms

The Free Basic Cyclonis Backup plan gives you 2 GB of cloud storage space with full functionality! No credit card required. Need more storage space? Purchase a larger Cyclonis Backup plan today! To learn more about our policies and pricing, see Terms of Service, Privacy Policy, Discount Terms and Purchase Page. If you wish to uninstall the app, please visit the Uninstallation Instructions page.

Cyclonis Password Manager Details & Terms

FREE Trial: 30-Day One-Time Offer! No credit card required for Free Trial. Full functionality for the length of the Free Trial. (Full functionality after Free Trial requires subscription purchase.) To learn more about our policies and pricing, see EULA, Privacy Policy, Discount Terms and Purchase Page. If you wish to uninstall the app, please visit the Uninstallation Instructions page.