Analizzato da: Michael Angelo Casayuran

We received spammed messages pretending to be from Skype which promotes the product by describing its new features. The spammed message instructs recipients to access the attached .ZIP file which contains a malicious executable file detected as WORM_FANBOT.A. The sender address clearly indicates that the mail did not originate from Skype; however, in the eyes of unsuspecting users, this old-fashioned trick might still work and cause harm to potential victims.
 Data/ora di blocco Spam: : 20 marzo 2012 GMT-8
 TMASE
  • Motore TMASE: :
  • Patrón TMASE: :AS8786