This fake fax spam comes with a malicious attachment:
From: eFax [message@inbound.efax.com]
Date: 28 October 2015 at 10:08
Subject: eFax message from "Booking.com - HylaFa" - 1 page(s), Caller-ID: 031207944200
Fax Message [Caller-ID: 031207944200]
You have received a 1 page fax at 2015-10-28 08:57:17 GMT.
* The reference number for this fax is lon1_did14-1445421403- 1407880525-89.
View this fax using your Microsoft Word.
Please visit www.efax.com/en/online_fax_FAQ if you have any questions regarding this message or your service.
Thank you for using the eFax service!
© 2013 j2 Global, Inc. All rights reserved.
eFax® is a registered trademark of j2 Global, Inc.
This account is subject to the terms listed in the eFax® Customer Agreement.
 |
| FAX_20151028_1445421437_89.doc
99K |
|
|
The attachment
FAX_20151028_1445421437_89.doc is the same as used in
this spam run and the payload is the Dridex banking trojan.
No comments:
Post a Comment