Another fake HP scan spam email leading to malware. This one follows the new technique of putting a malicious HTML (HP_Scan.htm) file inside a ZIP file to reduce the risk of it being blocked, and then it has multiple payload sites to try to get a higher infection rate. Nasty.Date: Fri, 6 Apr 2012 […]
We’re seeing a huge spam run at the moment with various subject and attachments, but typically using an HTML-in-ZIP attack with an attachment called Invoice_N{DIG}.zipSubjects include:DHL: DELIVER CONFIRMATION – FAILED 113996FW: End of Aug. StatementFW: Scan from a Xerox W. Pro #7338339although there are probably many others.The attachment leads to a multihomed exploit kit (report […]
Latest Comments