Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spammed News Headlines With Password Protected Zip File


  • Please log in to reply
No replies to this topic

#1 harrywaldron

harrywaldron

    Security Reporter


  • Members
  • 509 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Roanoke, Virginia
  • Local time:06:29 AM

Posted 05 June 2007 - 01:50 PM

The ISC is reporting spammed password protected zip files (with the password included in the email message), that pretend to be "breaking news articles" from official sites. The malware component will "phone home" and most likely download malware agents. AV protection will be very limited for a day or so. Users should always avoid opening these types of attachments and get their news from official websites instead.

Spammed News Headlines with password protected zip file
http://isc.sans.org/diary.html?storyid=2919

Attachments include names such as "<news organization>-news<digits>.zip". The binary once executed appears to callhome via an HTTP POST to at least one of two websites



BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users