tag:blogger.com,1999:blog-9100761888144266006.post1731195862594454413..comments2023-06-16T11:45:42.267+01:00Comments on Sanesecurity ClamAV blog: zero hour malware, phishing and scams: voicemail Message (07813297716) From:07813297716Steve Basfordhttp://www.blogger.com/profile/09190356137354403294noreply@blogger.comBlogger7125tag:blogger.com,1999:blog-9100761888144266006.post-59329317152870106202015-03-11T23:46:25.093+00:002015-03-11T23:46:25.093+00:00Had a user with this today. She didn't open th...Had a user with this today. She didn't open the attachment but I noticed that opening the email launched the installer with a file called msczvsx.exe . I killed it before it completed and got rid of the file, it put it in programdata, so I think we are ok. All scans a negative but that does mean much.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9100761888144266006.post-42139880629404877332015-03-11T13:27:09.806+00:002015-03-11T13:27:09.806+00:00We've received about 300 of these messages int...We've received about 300 of these messages into a combination of possible and explicit e-mail addresses within our organisation over the last couple of hours. Our Watchguard XTM505 is identifying the attachment as unsafe and deleting the ZIP file.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9100761888144266006.post-73276740132511110642015-03-11T12:31:38.828+00:002015-03-11T12:31:38.828+00:00Just received one of these, I did click on the zip...Just received one of these, I did click on the zip file, but it didn't open .... should I still be concerned?Pen 39noreply@blogger.comtag:blogger.com,1999:blog-9100761888144266006.post-35568143443353154432015-03-11T12:29:39.616+00:002015-03-11T12:29:39.616+00:00Thank you I have received it too!! Thank you I have received it too!! SCnoreply@blogger.comtag:blogger.com,1999:blog-9100761888144266006.post-70811544067498843472015-03-11T12:25:45.018+00:002015-03-11T12:25:45.018+00:00We have seen this in the form of undeliverables, d...We have seen this in the form of undeliverables, does this indicate the user has an infection on their machine?Patnoreply@blogger.comtag:blogger.com,1999:blog-9100761888144266006.post-61243771508953993532015-03-11T11:54:07.880+00:002015-03-11T11:54:07.880+00:00I just got one of these at 10:17 this morning, unz...I just got one of these at 10:17 this morning, unzipped to find a windows .exe which I didn't execute.<br /><br />Address as from <br /><br />How to stop it?!alexxhttps://www.blogger.com/profile/07069943210460558506noreply@blogger.comtag:blogger.com,1999:blog-9100761888144266006.post-25781314922164757742015-03-11T11:48:49.691+00:002015-03-11T11:48:49.691+00:00Thank you. I have just received this voice mail an...Thank you. I have just received this voice mail and nearly opened it. You have saved me so much heartache, especially as I am already having a bad day! Thanks and regards, Kimble.<br />Anonymousnoreply@blogger.com