A massive phishing campaign pretending to be a Subway order confirmation is underway distributing the notorious TrickBot malware. TrickBot is a trojan malware infection commonly distributed through phishing campaigns or installed by other malware. The attack may indicate a data breach at Subway UK that allowed the threat actors to gain access to customer’s names and email addresses. Subway told BleepingComputer that they are investigating a disruption to their system and advise people to delete the email. The emails are using email subjects such as “Your order is being processed”” and “”We’ve received your order
Source: security