Spoofed Webex, Paypal Emails Lead To Rogue Flash Update

snoopy · Oct 18, 2012

A must read - the article is lengthy.

Oct16
Spoofed WebEx, PayPal Emails Lead to Rogue Flash Update
4:04 pm (UTC-7) | by Jocelyn Racoma (Threat Analyst)

Without verifying its legitimacy, users who may be anticipating a WebEx conference are at risk of downloading variants of a notorious info stealing malware.

Last week, we received two spoofed emails that redirect users to a fake Adobe Flash Player update. These messages use different approaches to lure users into downloading the malicious file update_flash_player.exe (detected as TSPY_FAREIT.SMC). The first email is disguised as a WebEx email containing an HTM attachment. Once users execute this attachment, they are lead to a malicious site hosting TSPY_FAREIT.SMC. Employees may be trick into opening this as it appears to be an alert coming from a business tool they often use. The second sample, on the other hand, is a spoofed PayPal email that features transaction details. Curious users who click these details are then directed to the webpage hosting the rogue Flash update file.
Click to expand...

Story & screenshots: http://blog.trendmicro.com/trendlabs-security-intelligence/

Log in or Sign up

Spoofed Webex, Paypal Emails Lead To Rogue Flash Update

snoopy Registered Members

Share This Page

Log in or Sign up

Spoofed Webex, Paypal Emails Lead To Rogue Flash Update

snoopy Registered Members

Share This Page

Useful Searches