BP Chargemaster's Pulse rebrand let crims send IcedID banking trojan from formerly legit mailboxes

BP Chargemaster's Pulse rebrand let crims send IcedID banking trojan from formerly legit mailboxes

BP Chargemaster, purveyors of sockets for electric vehicles, seemingly had its email domain hijacked by criminals who used formerly legitimate addresses to send banking trojans to customers.


Malware-laden emails were sent from corporate email addresses earlier this month – and their attachments included the IcedID credential-stealing malware.

It appears that a corporate mail server may have been left unattended after BP Chargemaster rebranded as BP Pulse at the start of December 2020. During the rebrand, the BP Chargemaster and Polar websites were replaced by bppulse.co.uk, "to avoid any confusion".


Register reader Matt received some emails from BP Chargemaster which he was certain didn't come from the company.

"I last dealt with BP Chargemaster 2 years ago in relation to fitting a chargepoint for an el ..

Support the originator by clicking the read the rest link below.