Author Topic: zbot mass mailing campaign  (Read 4104 times)

0 Members and 1 Guest are viewing this topic.

December 02, 2010, 07:12:22 pm
Read 4104 times

b0dach

  • Newbie

  • Offline
  • *

  • 3
We received emails today stating "Your package has arrived!". The second link is obfuscated and takes you to the link below. This asks you to download and install invoice.src. The Virus Total report link is included:

http://butehotel.com/invoice.scr trojan
http://www.virustotal.com/file-scan/report.html?id=5cc6c20cc70948caf5c35cbf1a0821cbeea95ff0ab1aa757f304e1a5ef31d626-1291309726