Just received a "Myfax fax" for a new job....
Date: Thu, 18 Dec 2014 12:27:41 +0000 From: "MyFax"Subject: Internet Fax Job Fax image data http:/ / neyeradvisors DOT com/documents/fax.html
If you click on the random(ish) link (don't btw) you'll get a zip file,
which contains:
fax8642174_pdf.exe
Note: it's an executable file and NOT a pdf.
Submitting the file to VirusTotal gives us a report of:
bb188ef8590840b72e4fa762e7e99124 (2/56 scanners hit)
Needless to say, the only job you'll get from this, it a PC cleaner :(
Detected as Sanesecurity.Malware.24672 (phish.ndb)
Cheers,
Steve
Sanesecurity.com
1 comment:
that's an interesting stuff! thanks for sharing.
Post a Comment