Analyse vonMichael Angelo Casayuran

We received spammed messages pretending to be from Skype which promotes the product by describing its new features. The spammed message instructs recipients to access the attached .ZIP file which contains a malicious executable file detected as WORM_FANBOT.A. The sender address clearly indicates that the mail did not originate from Skype; however, in the eyes of unsuspecting users, this old-fashioned trick might still work and cause harm to potential victims.
 Spam gesperrt am/um:: 20 März 2012 GMT-8
 TMASE
  • TMASE Engine::
  • Patrón TMASE: AS8786