A new malware campaign has been spotted that has begun seeding spam messages with a downloader heavily obfuscated with JavaScript. The SANS Internet Storm Center said today that two days ago, a flood of spam messages were observed laced with .js attachments.
The JavaScript obfuscates a downloader that once it’s installed on a compromised machine, calls out to a number of domains looking for either the Kovter or Miuref click-fraud malware.
Full article:
https://threatpost.com/click-fraud-malware-spreading-via-javascript-attachments/114011
The JavaScript obfuscates a downloader that once it’s installed on a compromised machine, calls out to a number of domains looking for either the Kovter or Miuref click-fraud malware.
Full article:
https://threatpost.com/click-fraud-malware-spreading-via-javascript-attachments/114011
