Amadey Botnet Targets U.S. Taxpayers with Tax Refund Notice

guest · Sep 18, 2019

Amadey Botnet Targets U.S. Taxpayers with Tax Refund Notice
September 18, 2019
https://www.bleepingcomputer.com/ne...-targets-us-taxpayers-with-tax-refund-notice/

A phishing campaign has been spotted recently delivering Amadey botnet malware to taxpayers in the U.S. through fake income tax refund emails.

Amadey is relatively new on the scene but multiple groups have used it to drop secondary malware on infected computers. It was previously seen distributed by RIG exploit kit. One of the actors turning to Amadey's deliver services is TA505, a group that attacks financial institutions and retail companies.
Tax refund is a powerful lure
Security researchers at Cofense noticed this phishing campaign bypassing a secure email gateway (SEG) solution and dropping emails with malicious attachments.

The infection chain starts with a message pretending to be from the Internal Revenue Service (IRS), informing the recipient that they're eligible for a tax refund.
Victims are deceived that they can get the refund after filling in some details in a document available from the fraudulent site. The file is a ZIP archive that contains a Visual Basic script dropper.
Click to expand...

Cofense: New Phishing Campaign Targets U.S. Taxpayers by Dropping Amadey Botnet

Log in or Sign up

Amadey Botnet Targets U.S. Taxpayers with Tax Refund Notice

guest Guest

Log in or Sign up

Amadey Botnet Targets U.S. Taxpayers with Tax Refund Notice

guest Guest

Useful Searches