Virus Email - You Have Received a Voice Mail on Dropbox

Comments: 0
Views: 3,050
Save
Updated: Sep. 22, 2014 2014-09-22T02:23:37
Posted: Sep. 21, 2014 2014-09-21T19:30:30
Online Threat Alerts (OTA)

The fake email message below with the subject: "You Have Received a Voice Mail," has a link to a compromised website hosting malware. The fake message was designed to trick the recipients into clicking on the link within it, by claiming that they have received a voice mail that was upload to Dropbox.

The Fake and Malicious Fax Email Message

Virus Email: You Have Received a Voice Mail
From: Microsoft Outlook
Subject: You have received a voice mail

You received a voice mail : VOICE976-588-6749.wav (25 KB)
Caller-Id: 976-588-6749
Message-Id: D566Y5
Email-Id:

Download and extract to listen the message.

We have uploaded voicemail report on dropbox, please use the following link to download your file:

http://www.prolococapena.com/yckzpntfyl/mahlqhltkh.html

If the recipients click on the malicious link in the email message, they will be taken to the compromised website: www.prolococapena.com. The malicious website has a Zip or compressed file located at:

www.prolococapena.com/yckzpntfyl/Invoice102740_ 448129486142_pdf.zip

called: "Invoice102740 _448129486142_pdf.zip" that contains the virus or Trojan horse file listed below that will infect their computers if it is open.

Invoice102740 _448129486142_pdf.exe

Note: the cyber-criminals behind this malicious email message may change the name of the file and website.

The victim may also be taken to the compromised website: www.hallerindia.com.

We found the following threats after scanning the malicious file: Invoice102740_448129486142_pdf.exe

Downloader.Generic14.BAX
Win32.Malware!Drop
Trojan.GenericKD.1871130
Trojan[Downloader]/Win32.Upatre
TR/Dldr.Upatre.bao
Trojan.Win32.Upatre.apuI
Trojan.GenericKD.1871130
W32/Trojan.RUYZ-4978
Trojan.Upatre.46
Win32/TrojanDownloader.Waski.A

Now, if you have already clicked on the link in the malicious email message, downloaded and opened the malicious file, please do a full scan of your computer with the antivirus software installed on it.

Because, once your computer has become infected with the malicious Trojan horse, the cybercriminals behind this email message will be able to access and take control of your computer remotely from anywhere around the world. They may spy on you, use your computer to commit cybercrimes, or steal your personal and financial information.

If you don’t have antivirus software installed on your computer, please click here for a list of free antivirus software.

For a list of other malicious email messages, please click here.