#carberp

Most Dangerous Malware That Can Empty Your Account

Most Dangerous Malware That Can Empty Your Account

Most Dangerous Malware That Can Empty Your Account

A recent report indicated that North Korea cyber warriors were attacking banks in Nigeria and about 17 other countries.

At the beginning of June 2014, a large international effort, named Operation Tovar, involving the United States and European enforcement agencies and security firms worldwide,…

Nowy wariant trojana Carberp

Użytkownicy w Australii są głównym celem cyberprzestępców uzbrojonych w nową wersji szkodnika Carberp, które jest zdolny do zakażania systemów 32 i 64-bitowych.

Szczep jest dostarczany przez złośliwe kampanie e-mailowe, które zostały zidentyfikowane w połowie grudnia 2014 roku. Niczego nie podejrzewający użytkownicy nabierają się na uruchomienie szkodliwego pliku poprzez e-mail. Po zainfekowaniu…

Carberp,  a financial Trojan malicious software, has recently been listed for sale on the underground market at a very low price. This is a risky situation because it means that the code will get in the hands of many malware makers that will create a lot of new versions of Carberp. Andrey Komarov, member of [...]

The post Risky situation: source code of financial malware is for sale at low price appeared first on SecurEncrypt - HIPAA/HITECH File Encryption Software.

Subjects seen:

Your Receipt and Itinerary

Typical e-mail details:

Thank you for choosing Delta. We encourage you to review this information before your trip.

If you need to contact Delta or check on your flight information, go to delta.com/itineraries Now, managing your travel plans just got easier. You can exchange, reissue and refund electronic tickets at delta.com/itineraries. Take control and make changes to your itineraries at delta.com/itineraries. Speed through the airport. Check-in online for your flight. Check-in Flight Information DELTA CONFIRMATION #: DBD96DAC TICKET #: 00258169169277 Bkng Meals/ Seat/ Day Date Flight Status Class City Time Other Cabin --- ----- --------------- ------ ----- ---------------- ------ ------ ------- Mon 11MAR DELTA 372 OK H LV NYC-KENNEDY 820P F 19C AR SAN FRANCISCO 8211P COACH Fri 15MAR DELTA 1721 OK H LV LOS ANGELES 1145P V 29A AR NYC-KENNEDY 812A# COACH Check your flight information online at delta.com/itineraries

Malicious URLs

megatransmissions.com/wp-content/plugins/zxxgnbbestr/wps.php?v20120226

cyrno.com/wps.php?v20120226

eventy-w-sudetach.vuviw.pl/wp-content/themes/mantra/uploads/wps.php?v20120226

forum.valholl-online.fr/wps.php?v20120226

bjyltouch.com/wps.php?v20120226

dollyparadise.dollsky.com/wps.php?v20120226

carlisledj.com/wps.php?v20120226

iamrachefashion.com/wps.php?v20120226

blackmanlegal.estudios.us/wp-content/plugins/akismet/c.php?v20120226

kidproofinternational.com/wp-content/plugins/zceagonvalc/b.php?v20120226

guitarska.com/wp-content/plugins/akismet/a.php?v20120226

ilcindia.org/wp-content/uploads/wps.php?v20120226

godsbattleaxeintl.com/wps.php?v20120226

blog.w3china.org/wp-content/themes/mantra/uploads/wps.php?v20120226

inanimateweaknesses.net/closest/c93jfi2jf92ifj39ugh2jfo3g.php

Additional Notes:

Subjects seen:

SBQ Form #[removed]

Typical e-mail details:

Thank you for supporting your Better Business Bureau (BBB). As a service to BBB Accredited Businesses, we try to ensure that the information we provide to potential customers is as accurate as possible. In order for us to provide the correct information to the public, we ask that you review the information that we have on file for your company. We encourage you to print this SBQ Form, answer the questions and respond to us. (self-extracting archive, Adobe PDF) Please look carefully at your telephone and fax numbers on this sheet, and let us know any and all numbers used for your business (including 800, 900, rollover, and remote call forwarding). Our automated system is driven by telephone/fax numbers, so having accurate information is critical for consumers to find information about your business easily. Thank you again for your support, and we look forward to receiving this updated information. Sincerely, Accreditation Services

Malicious URLs

reomaintenanceservices.info/oCggE.exe

mastpartners.com/xeYa0iD.exe

klimasysteme-taut.de/cgWPSYs.exe

Additional Notes:

Subjects seen:

You have received a secure message

Typical e-mail details:

You have received a secure message Read your secure message by opening the attachment, SECUREDOC. You will be prompted to open (view) the file or save (download) it to your computer. For best results, save the file first, then open it. If you have concerns about the validity of this message, please contact the sender directly. For questions about Key's e-mail encryption service, please contact technical support at 888.764.7941. First time users - will need to register after opening the attachment. 

Malicious URLs

mywebworks.de/adFk2tWQ.exe

ponnyfreunde.de/0aQy.exe

zockit.eu/3NY.exe

hotelcasasantorini.com/whz7n4ve.exe

Additional Notes: