Devious Spamhaus Phishing Scam Warns You're on an Email Block List

guest · Feb 1, 2020

Devious Spamhaus Phishing Scam Warns You're on an Email Block List
February 1, 2020
https://www.bleepingcomputer.com/ne...hing-scam-warns-youre-on-an-email-block-list/

Spamhaus Project is an organization that creates spam block lists that mail servers can utilize to block known spammers from sending emails to recipients in their organization.
Malware phishing campaign impersonates Spamhaus
In a new phishing campaign discovered by ProofPoint researcher Matthew Mesa, malware distributors are sending emails that pretend to be from the Spamhaus Project.

These email states that the recipient must "Urgently Take Action" because their email address has been added to the Spamhaus Block List (SBL) and will be blacklisted on mail servers unless they follow the instructions found at a listed URL.
When executing the VBS file, it will create a randomly named text file in the %Temp% folder, which Mesa states are Ursnif malware executables, which is then launched by the script.

Ursnif is a data-stealing Trojan that records what a victim types on a computer, what sites they browse to, what is copied into the Windows clipboard, and what programs they run. This information is then saved in log files and sent back to the attacker's web site.
Click to expand...

Log in or Sign up

Devious Spamhaus Phishing Scam Warns You're on an Email Block List

guest Guest

Log in or Sign up

Devious Spamhaus Phishing Scam Warns You're on an Email Block List

guest Guest

Useful Searches