This fake voice mail message leads to malware:
From: Microsoft Outlook [no-reply@victimdomain.com]
Date: 19 September 2014 11:59
Subject: You have received a voice mail
You received a voice mail : VOICE976-588-6749.wav (25 KB)
Caller-Id: 976-588-6749
Message-Id: D566Y5
Email-Id: conrad@longmore.me.uk
Download and extract to listen the message.
We have uploaded voicemail report on dropbox, please use the following link to download your file:
---
http://www.prolococapena.com/yckzpntfyl/mahlqhltkh.html
---
Sent by Microsoft Exchange Server
The link in the email messages goes to
www.prolococapena.com/yckzpntfyl/mahlqhltkh.html first and then downloads a file from
www.prolococapena.com/yckzpntfyl/Invoice102740_448129486142_pdf.zip which contains exactly the same malicious executable being pushed in this
earlier spam run.
No comments:
Post a Comment