Awesome online PE malware analysis by @cuckoosandbox @malwr https://malwr.com/analysis/ZWY0YzA1ODA2ZjcyNGQ3Y2I5ZTI1NDA3NzE4NGFhODY/ …
Warning: mail with fake Magento patch 9789 contains virus http://gwillem.gitlab.io/2017/04/21/fake-magento-patch-9789-is-virus/ …
-
-
-
have you tried VirusTotal?
- Show replies
New conversation -
-
-
Neutrino Bot aka Kasidet is the eventual payload. Looks like a new variant (traffic over SSL) cc
@campuscodi@hasherezade@jeromeseguraThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
The real story here is that hackers have a database of contact information for Magento CE stores which even Magento say they don't have
-
You might give them more credit here than they deserve. I get lots of phishing emails which sometimes happen to be my bank.
- Show replies
New conversation -
-
-
I hope they reply, the fact they are aware their servers have malware.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Magestore at they a large company? Or, one man dev company?
-
From the looks, a few ppl. US phone number but Vietnamese timezone.
- Show replies
New conversation -
-
-
Received such email. SpamAssasin didn't flag it as spam. Strange.
-
Did it still contain the (now defunct) magestore link?
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.