Trend Micro Security

Spam with Disguised Attachments Comes with Locky

 解析者: Joachim Capiral

A new wave of spam that uses *.rar *.zip *.gif *.tiff *.docx *.pdf *.jpg is making its rounds.

The attachment looks like it is renamed to lure recipients into clicking the attachment files. These attachments are archive files that come with a JavaScript file that drops a LOCKY malware, detected as JS_LOCKY.BQ.

It looks like this is similar to the spam wave found several days ago that also distributes Locky ransomware. See Malspam With JavaScript Attachment Leads To Locky Ransomware.

 スパムブロック日時 : 2016年3月29日 22:00:00 GMT-8
 TMASE
  • TMASEエンジン:8.0
  • TMASEパターンバージョン:2228