Nasty new malware ploy

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Oct 30, 2014 11:00 pm

Phishing and malware are outside of our purview but it's worth being aware of new approaches being used. I got one today that is a new twist. Apparently some of these guys are catching on to the fact that many people are leary of attachments:

This was sent to (apparently) everyone in the contact list of one of my wife's friends. Given that she runs a business, it's probably an extensive list. It has her full email signature at the bottom so it looks real to anyone who knows her -- unless they read it carefully and see the awkward English.

Hovering over the "docusign" link shows that it's spoofed, it really goes to a totally different website in Malaysia.

Unfortunately at least one mutual friend did click on the link. It went to what looked like a page of artwork. There were no requests for information so it's not a phishing attempt, more likely a keylogger or bot program that downloads. I'm waiting to hear what she reports after she finishes the virus scan that I urged her to run immediately.

It's dangerous out there. Mad

I worry about computer users like my very elderly father-in-law. Tricks like this one are easy to fall for.

Posted: Fri Oct 31, 2014 9:28 am

Juan,
Download HitmanPro it finds the hidden malware the others can not find, get a 30 day free trial. (sorry don't have the web address).

419Eater is my life Joined: 18 Jan 2010 Posts: 353

On a related note, I caught a variation of cryptolocker halfway through encrypting a friend's hard drive the other week. It had already gotten quite a few of his personal files before he realized something might be wrong and brought me the computer. His C: drive had some 2 million trash replicated virus files on it. Shocked

Anyway, the point is, I suspect he got it from a shady drive-by website as well, so yeah, that's still a real problem, and can catch even semi-savvy people off guard.