Thursday, 18 December 2014

malware: Myfax Internet Fax Job

Just received a "Myfax fax" for a new job....
Date: Thu, 18 Dec 2014 12:27:41 +0000
From: "MyFax" 
Subject: Internet Fax Job

Fax image data
http:/ / neyeradvisors DOT com/documents/fax.html
If you click on the random(ish) link (don't btw) you'll get a zip file,
which contains: 
Note: it's an executable file and NOT a pdf.
Submitting the file to VirusTotal gives us a report of:
bb188ef8590840b72e4fa762e7e99124 (2/56 scanners hit)
Needless to say, the only job you'll get from this, it a PC cleaner :(
Detected as Sanesecurity.Malware.24672 (phish.ndb)

1 comment:

fax to email said...

that's an interesting stuff! thanks for sharing.