Malware linked to recent Brussels lockdown / 2015-12-01

2015-12-01 Malware linked to recent Brussels lockdown
It must take a special kind of evil to try to spread malware under the guise of information about the recent Brussels lockdown. From the e-mail message:
Federale Politie
Commissariat de Police
Directorate of the special units (DSU)
Sir,
We kregen een terreuralarm met betrekking tot uw zakelijke omgeving.
Worden geadviseerd om de beschermende maatregelen (SECURITY TIPS) als gehecht aan jezelf, je bedrijf volgen en uw gezin beveiligd
.................................................................................................................
Monsieur,
Nous avons eu une alerte terroriste concernant votre secteur d'activité.
Être conseillé de suivre les mesures de protection (Conseils de sécurité) tels qu'ils sont joints pour vous garder, votre entreprise et votre famille fixée
Best regards,
Catherine De Bolle,
General Commissioner
Commissariat de Police
Rue du College 1,
1050 Brussel, Belgium
P: 032 2 515 71 86
E: commisioner(a)polfed-fedpol.be
With some shady files attached. Scanning them with virustotal gives that the .zip file contains the Java/Adwind malware.

[-- Attachment #2: Commissariat de Police.pdf --]
[-- Type: application/pdf, Encoding: base64, Size: 149K --]

[-- application/pdf is unsupported (use 'v' to view this part) --]

[-- Attachment #3: SECURETIPS15.zip --]
[-- Type: application/zip, Encoding: base64, Size: 157K --]

[-- application/zip is unsupported (use 'v' to view this part) --]

Archive:  SECURETIPS15.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
   119853  2015-11-30 04:13   SECURETIP15.jar
---------                     -------
   119853                     1 file

Tags: , ,

IPv6 check

Running test...
, reachable as koos+website@idefix.net. PGP encrypted e-mail preferred. PGP key 5BA9 368B E6F3 34E4 local copy PGP key 5BA9 368B E6F3 34E4 via keyservers

RSS
Meningen zijn die van mezelf, wat ik schrijf is beschermd door auteursrecht. Sommige publicaties bevatten een expliciete vermelding dat ze ongevraagd gedeeld mogen worden.
My opinions are my own, what I write is protected by copyrights. Some publications contain an explicit license statement which allows sharing without asking permission.
Other webprojects: Camp Wireless, wireless Internet access at campsites, The Virtual Bookcase, book reviews
This page generated by $Id: newsitem.cgi,v 1.58 2022/12/12 15:34:31 koos Exp $ in 0.010073 seconds.