Sponsored by..

Friday 19 September 2014

Microsoft Outlook "You have received a voice mail" spam

This fake voice mail message leads to malware:
From:     Microsoft Outlook [no-reply@victimdomain.com]
Date:     19 September 2014 11:59
Subject:     You have received a voice mail

You received a voice mail : VOICE976-588-6749.wav (25 KB)
Caller-Id: 976-588-6749
Message-Id: D566Y5
Email-Id: conrad@longmore.me.uk

Download and extract to listen the message.

We have uploaded voicemail report on dropbox, please use the following link to download your file:
---
http://www.prolococapena.com/yckzpntfyl/mahlqhltkh.html
---


Sent by Microsoft Exchange Server
The link in the email messages goes to www.prolococapena.com/yckzpntfyl/mahlqhltkh.html first and then downloads a file from www.prolococapena.com/yckzpntfyl/Invoice102740_448129486142_pdf.zip which contains exactly the same malicious executable being pushed in this earlier spam run.

No comments: