Thursday, 8 January 2015

Notice to appear in court malware

One Notice to appear in court malware arrived in the form of a html email,
with a link to a website to a downloadable zip file:

Headers:
From: "Reed Smith" {support@bautron.es}
Date: Thu, 8 Jan 2015 16:34:48 +0100 (CET)
Subject: Notice to appear in court
Message body:

    Notice to Appear,
    To view copy of the court notice click here. Please, read it thoroughly.

    Note: If you do not attend the hearing the judge may hear the case in your absence.
Copyright (c) 2015 | All right reserved
Here's the actually email on screen.




Clicking on the link with a Windows system gives you a zip file:
ReedSmith_Notice_00703221.zip
The site went down shortly after the above email was received, so couldn't do any more Zip file analysis :(

Cheers,

Steve
Sanesecurity.com

No comments: