Fake BankLine SPAM email From Bankline [secure.message@ bankline .com]
23.11.14
Edit
Artikel Terkait
- Fake Amazon.com order confimation #114-4788259-2304224
- Fake Nazareth House malware spam email claims a paying sheet is attached
- Fake UPS Package Delivery Notification # MHDXFHF691MHDXFHF887 or Invoice malware attached
- INV829502L Duplicate Payment Received Attached : malcicious .doc with macro : De_829502L.doc
- Email with a damaged malicious word doc attachment from Accounts Finchley
Fake BankLine SPAM email From Bankline [secure.message@ bankline .com]
Clicking the link downloads document_312_872_pdf.zip from the target site which in turn contains a malicious executable document_312_872_pdf.exe which has a VirusTotal detection rate of 3/54*... Also dropped are a couple of executables, egdil.exe (VT 2/54**, Malwr report) and twoko.exe (VT 6/55***, Malwr report).
You have received a new secure message from BankLine
From: Bankline [secure.message@ bankline .com]
Date: 13 October 2014 12:48
Subject: You have received a new secure message from BankLine
You have received a secure message.
Read your secure message by following the link ...
You will be prompted to open (view) the file or save (download) it to your computer. For best results, save the file first, then open it...
Clicking the link downloads document_312_872_pdf.zip from the target site which in turn contains a malicious executable document_312_872_pdf.exe which has a VirusTotal detection rate of 3/54*... Also dropped are a couple of executables, egdil.exe (VT 2/54**, Malwr report) and twoko.exe (VT 6/55***, Malwr report).