Spam with Disguised Attachments Comes with Locky
Publish Date: 29 de marca de 2016
![](https://documents.trendmicro.com/images/SpamAlert03302016_3.jpg)
A new wave of spam that uses *.rar *.zip *.gif *.tiff *.docx *.pdf *.jpg is making its rounds.
![](https://documents.trendmicro.com/images/SpamAlert03302016_2.jpg)
![](https://documents.trendmicro.com/images/SpamAlert03302016_1.jpg)
The attachment looks like it is renamed to lure recipients into clicking the attachment files. These attachments are archive files that come with a JavaScript file that drops a LOCKY malware, detected as JS_LOCKY.BQ.
It looks like this is similar to the spam wave found several days ago that also distributes Locky ransomware. See Malspam With JavaScript Attachment Leads To Locky Ransomware.
SPAM BLOCKING DATE / TIME: 29 de marca de 2016 GMT-8
TMASE
- TMASE Engine: :
- Patrón TMASE: :2228