AplusWebMaster
Topic Starter
FYI…
- http://www.f-secure.com/weblog/archives/ar…7.html#00001137
March 7, 2007 ~ "…The gang behind it has been masquerading as various German organizations when spamming out their malware, including GEZ, the German division of Ikea, and quelle.de. Today we saw a run of mails claiming to be from a dating site named Singel.de… The mails contained a ZIP attachment, with a file named Singel.de.pdf.exe inside… We're in the process of shutting down the offending site. Also, we detect the dropped samples as Trojan-Downloader:W32/Nurech.BB and the downloaded sample as Trojan.Win32.Agent.aeq ."
(Screenshots available at the URL above.)
- http://www.f-secure.com/weblog/archives/ar…7.html#00001137
March 7, 2007 ~ "…The gang behind it has been masquerading as various German organizations when spamming out their malware, including GEZ, the German division of Ikea, and quelle.de. Today we saw a run of mails claiming to be from a dating site named Singel.de… The mails contained a ZIP attachment, with a file named Singel.de.pdf.exe inside… We're in the process of shutting down the offending site. Also, we detect the dropped samples as Trojan-Downloader:W32/Nurech.BB and the downloaded sample as Trojan.Win32.Agent.aeq ."
(Screenshots available at the URL above.)