Another bunch of fake "voice message" spams with a malicious payload are doing the rounds, for example:
Subject: Voice Message from Unknown (996-743-6568)
Subject: Voice Message from Unknown (433-358-8977)
Subject: Voice Message from Unknown (357-973-7738)
Body:
- - -Original Message- - -
From: 996-743-6568
Sent: Wed, 8 Jan 2014 12:06:38 +0000
To: [redacted]
Subject: Important Message to All Employees
Attached is a file
VoiceMessage.zip which in turn contains
VoiceMessage.exe which has a VirusTotal detection rate of
11/47. Automated analysis tools
[1] [2] show an attempted connection to
casbir.com.au
on
67.22.142.68 (Cologlobal, Canada). This appears to be the only server on this IP address, so blocking or monitoring it for the time being may be prudent.
No comments:
Post a Comment