Thanks for keeping an eye out for us.
+10
Topic: [MALICIOUS] BTC-E Passport (email) (Read 1246 times)
BTC-E isn't based in Tokyo...
This slipped through my gmail spam filter this morning. Just thought I'd post a screenshot so a newer member doesn't download the malicious attachment. In terms of fake emails, this one is above average because they managed to fake the SMTP headers.
The attachment is a file called Document(03-2014).rar
After unraring, the contents are Document passport data - Realsed (2014-03).jar (yeah....not running that)
VirusTotal Analysis:
https://www.virustotal.com/en/file/17eaec30da2f752073f068a2d1c840087bc91f53570b4c13ec526da2ae98ddcd/analysis/1394557261/
Antivirus Result
Comodo UnclassifiedMalware
ESET-NOD32 a variant of Java/Adwind.G
TrendMicro JAVA_OZNEB.B
TrendMicro-HouseCall TROJ_GEN.F47V0311
So, as I guessed from the beginning, the .jar file is malicious haha
Hope this post helped someone out.
Jump to: