Scan_0041.7z: Extracts to: -6dt874p53077.js - Current Virus total detections 14/59*. Hybrid Analysis**…
This particular js has these 3 urls embedded in it (there will be dozens of other Urls that download the payload in different js files). It uses the first url & only moves to the next if the first does not respond
(VirusTotal 9/66[3])…
http ://damynghedunglinh .com/YoepHGds?
http ://3dpvietnam .com/YoepHGds?
http ://emergency-help .com.au/YoepHGds? …
The basic rule is NEVER open any attachment to an email, unless you are expecting it…"
* https://www.virustotal.com/en/file/1e71e61ebcabc7b5da7e797fd28656c6684c03a632131e8341757152328370af/analysis/1514542049/
Scan_005416.js
> https://www.apple.com/iphone-battery-and-performance/
Dec 28, 2017 - "A Message to Our Customers about iPhone Batteries and Performance…
Apple is reducing the price of an out-of-warranty iPhone battery replacement by $50 — from $79 to $29 — for anyone with an iPhone 6 or later whose battery needs to be replaced, starting in late January and available worldwide through December 2018. Details will be provided soon on apple.com.
Early in 2018, we will issue an iOS software update with new features that give users more visibility into the health of their iPhone’s battery, so they can see for themselves if its condition is affecting performance…"
BoA - phish
- https://myonlinesecurity.co.uk/bank-of-america-alert-phishing/
17 Jan 2017 - "…. an aggressive phishing campaign against Bank of America arriving overnight UK time. They all pretend to come from Bank of America < BankofAmerica@ customerloyalty.accounts.com > but are actually coming from various servers. I have posted details of 2 that I received. The emails are identical apart for the subject line. There will almost certainly be other similar subjects that I haven’t seen yet.
The subjects I have seen so far are:
Bank of America Alert Sign-in to Online Banking Locked
Bank of America Alert: Unlock Your Account Important Message From Bank Of America ®
The link in the email http ://www .valaskabela .sk/new .php -redirects- you to:
http ://bankofamerica-com-update-work-new2018.hbdhshjdsjkds .co.uk/d983474dae569d3bdffe8735ae43151a/ (random ID /referral string after the co.uk/)…
'IRS' has issued a warrant for my arrest … Tax fraudsters are aggressive and use threatening phone calls while impersonating IRS agents, and the scams remain a major threat to taxpayers
… Surefire signs of a scam? The IRS will never demand immediate payment or ask for financial information over the phone, threaten to sic law enforcement on you or refuse an appeal
- https://www.cnbc.com/2018/02/22/the-irs-has-issued-a-warrant-for-my-arrest.html
Feb 22, 2018 - "… he asked me to give him my Social Security number so we could verify it with the one in my 'case file.' I questioned how the IRS can demand that I pay taxes without giving me the opportunity to question or appeal the amount they say that I owe. I then asked him for his name and his IRS identification number. I was disconnected…
I contacted the IRS about the unsolicited call from the scammer who left the threatening message. The IRS representative said that, despite warnings, people still readily give out personal data and fall into the traps of these scammers. To that point, the Treasury Inspector General for Tax Administration reports that more than 10,000 victims have collectively paid in excess of $54 million as a result of phone scams since October 2013. So while it may seem obvious, here goes: Never, ever give out personal financial information — such as Social Security numbers or credit card and bank account numbers and passwords — to anyone who calls you, claiming to be from the IRS…"
___
