Malware linked to recent Brussels lockdown / 2015-12-01

2015-12-01 Malware linked to recent Brussels lockdown 3 years ago
It must take a special kind of evil to try to spread malware under the guise of information about the recent Brussels lockdown. From the e-mail message:
Federale Politie
Commissariat de Police
Directorate of the special units (DSU)
Sir,
We kregen een terreuralarm met betrekking tot uw zakelijke omgeving.
Worden geadviseerd om de beschermende maatregelen (SECURITY TIPS) als gehecht aan jezelf, je bedrijf volgen en uw gezin beveiligd
.................................................................................................................
Monsieur,
Nous avons eu une alerte terroriste concernant votre secteur d'activité.
Être conseillé de suivre les mesures de protection (Conseils de sécurité) tels qu'ils sont joints pour vous garder, votre entreprise et votre famille fixée
Best regards,
Catherine De Bolle,
General Commissioner
Commissariat de Police
Rue du College 1,
1050 Brussel, Belgium
P: 032 2 515 71 86
E: commisioner(a)polfed-fedpol.be
With some shady files attached. Scanning them with virustotal gives that the .zip file contains the Java/Adwind malware.

[-- Attachment #2: Commissariat de Police.pdf --]
[-- Type: application/pdf, Encoding: base64, Size: 149K --]

[-- application/pdf is unsupported (use 'v' to view this part) --]

[-- Attachment #3: SECURETIPS15.zip --]
[-- Type: application/zip, Encoding: base64, Size: 157K --]

[-- application/zip is unsupported (use 'v' to view this part) --]

Archive:  SECURETIPS15.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
   119853  2015-11-30 04:13   SECURETIP15.jar
---------                     -------
   119853                     1 file

Tags: , ,

, reachable as koos+website@idefix.net. PGP encrypted e-mail preferred.

PGP key 5BA9 368B E6F3 34E4 local copy PGP key 5BA9 368B E6F3 34E4 via keyservers pgp key statistics for 0x5BA9368BE6F334E4 Koos van den Hout
RSS
Other webprojects: Camp Wireless, wireless Internet access at campsites, The Virtual Bookcase, book reviews
This page generated in 0.003973 seconds.