TOKYO (MacHouse) – A few days ago, we introduced a spam message whose title was UPS Delivery Problem NR.2612749. It originated from a server in Greece though it’s likely that it was sent by someone somewhere else. In the meantime, the spam message comes with a suspicious attachment, which looks like containing an executable program. So we’ve asked Sophos to analyze the attachment. They say
The sample file you sent in for analysis does contain a malicious file. The file UPS_invoice_1238.exe was detected as Mal/EncPk-NS and as Mal/FakeAV-BW.
Related stories:
Got UPS Package from Greece? – Part 1
Sophos – Mal/EncPk-NS Malicious behavior
