威胁百科全书

Trickbot Strikes Via New Spam Wave

Publish date: 十一月 21, 2018

分析者:

Jat Lucas Sauler


We have observed a new spam wave delivering Trickbot. This campaign uses spam mail with malicious attachments disguised as a Microsoft Excel file. The message contains fake payment notification, claiming to be from well-known banks or financial entities. When the .XLS attachment is opened, it asks users to enable macros. This then executes a PowerShell command to access a malicious link that downloads the Trickbot malware.

Trend Micro detects the malicious attachment as Trojan.X97M.POWLOAD.NSFGAIBR. Trend Micro email products easily prevents spam messages from reaching your inbox. While products with anti-spam help, users are still advised to ignore email that are fro unknown sources.

垃圾邮件阻止日期/时间: 21 十一月 2018 09:58:00 下午 GMT-8
TMASE Information

  • TMASE引擎(全局: :8.0
  • TMASE样式(全局): :4238

通过以下社交网站联系我们