The Fake and Malicious Fax Email Message
***** ************ ************* ********
INCOMING FAX REPORT
***** ************ ************* ********
Date/Time: Thursday, 18.09.2014
Speed: 353bps
Connection time: 08:02
Page: 4
Resolution: Normal
Remote ID: 611-748-177946
Line number: 3
DTMF/DID:
Description: Internal only
https://storage-fax.com/fax-id446
If the recipients click on the malicious link in the email message, they will be taken to the malicious website: https://storage-fax.com/fax-id446, which has a Zip or compressed file called: "fax-id9182719182837529.zip" that contains one of the virus or Trojan horse file listed below that will infect their computers if it is open.
- a571141acbb53620cf110 300c9d91479
- fax-id9182719182837529.scr
- fax-id9182719182837529_scr
- a571141acbb53620 cf110300c9d91479.exe
- file-7474448_scr
Note: the cyber-criminals behind this malicious email message may change the name of the file.
We found the following threats after scanning the malicious file: fax-id9182719182837529.zip
- Win32.Malware!Drop
- TR/Crypt.ZPACK.87096
- Trojan.Win32.Swizzor.2!O
- W32/Trojan.EZQX-7459
- Trojan.Encoder.514
- Win32/Filecoder.NCE
- W32/Trojan3.KUL
- Trojan-Ransom.Win32.Blocker.fslz
- Trojan.FakePDF
- Troj/Ransom-ALK
- Win32.Malware!Drop
Now, if you have already clicked on the link in the malicious email message, downloaded and opened the malicious file, please do a full scan of your computer with the antivirus software installed on it.
Because, once your computer has become infected with the malicious Trojan horse, the cybercriminals behind this email message will be able to access and take control of your computer remotely from anywhere around the world. They may spy on you, use your computer to commit cybercrimes, or steal your personal and financial information.
If you don’t have antivirus software installed on your computer, please click here for a list of free antivirus software.
For a list of other malicious email messages, please click here.