So I received a fake email apparently from "Cavirtex Support (
[email protected]" earlier today with what is likely a virus attached to it.
The subject line was: [cavirtex.com.com] Invoice Payment (#4142) and the email was as follows:
1 attachment (125.5 KB)
Download invoice_4142.jar (125.5 KB)
invoice_4142.jar
Download
Download as zip
Invoice Payment
Thank you for using Cavirtex. Wish you have a happy time here!
Regards
Cavirtex Support.
http://www.cavirtex.comI haven't used them in a while and the writing of the email just looks suspicious. Just figured I'd give others a heads up. Has anyone else received this email yet?
A bunch of emails were sent out and a few notices to avoid it
Some malware phishing attempt to get peoples Bitcoins
Sept. 23, 2014, 6:33 p.m. - CAVIRTEX users getting spammed with invoice.jar again
CAVIRTEX customers are getting spammed with another round of the infamous "invoice.jar" remote access trojan (RAT) malware. DO NOT OPEN THE ATTACHMENT. Previous analysis of the malware by CAVIRTEX showed that the malware could automatically hunt down bitcoin, litecoin, and other cryptocurrency wallets, automatically sending them to the attacker. The malware also allows an attacker to gain full control of the victim's system. This includes logging the password of users while accessing their CAVIRTEX account.
The malware works on both Windows and Linux systems.
The message has a spoofed From field to make it appear as if it were coming from us. We did not send this email.
To help prevent the spread of this email, if possible please mark the message as spam with your email provider.
