Security

Michael Jackson X-file scam steals passwords

Security vendors have been reporting a wave of Michael Jackson spam emails designed to disseminate a Zbot banking password variant.

According to the PC Tools Threatfire blog, emails with the subject line: 'Michael Jackson Was Killed. have been found in the security company's user community.

The link then redirects to a site hosted at 87.97.116.131. This is hosted in an x-file-esque directory “x-files/x-file-mjacksonkiller.exe”, not live at the time of writing.

When the PC Tools users visited the site, it hosted a malformed pdf and Zbot banking password stealing variant.

PC users are reminded to keep updated third-party plugins such as PDF readers. It's never a good idea to run an executable file from an untrusted source, to click links in emails, or visit unknown sites.

Previous ArticleNext Article

Leave a Reply

GET TAHAWUL TECH IN YOUR INBOX

The free newsletter covering the top industry headlines

Send this to a friend