Monday, 22 September 2014

Lena Michalczyk STE LTD "documents" spam

This spam message does not come from STE UK Ltd or any company of a similar name, not does it come from anyone called Lena Michalczyk. In the sample I received, it actually originated from a hacked machine located in the Federated States of Micronesia.

From:     lena michalczyk [michalczyklena@gmail.com]
Date:     22 September 2014 10:01
Subject:     documents

--
Regards Lena Michalczyk STE LTD.
office no. 07999258583

--
Regards Lena Michalczyk STE LTD.
office no. 07999258583
In the same I saw, the attached file was block20140915_16321753.pdf.zip but the attachment itself was corrupt, however there's a good chance that the spammers will fix this and send it out with a working payload.

If you receive a message like this, simply delete it and do not open the attachment.

4 comments:

  1. This comment has been removed by the author.

    ReplyDelete
  2. Thank you! The same happened to me today

    ReplyDelete
  3. here was no attachment on the one I received. What's the point, then?

    ReplyDelete
  4. @Sam, I think the spammers made an error. Instead of Base 64 encoded data in the attachment it just said "zz.zip". But the chances are that they'll fix it and try again.

    ReplyDelete