The XimianEvolution spammer is back.
X-Mailer: XimianEvolution1.4.6
Forcing malware attachments into users mailboxes since July 2013.
Here's the VT scans:
https://www.virustotal.com/en/file/7c9623fb81b931c96625a87fcaee7c9f1285c08b270a
998a3f44bdb042a5a299/analysis/1413325902/
https://www.virustotal.com/en/file/53d1265f1d0a4d878f785edbba9272c96b134b36b306
8a57e6a48dbd6955098e/analysis/1413327084/
VT had not seen these before. Detection scores - 24/54 and 26/54
The spam attachments are about 70-odd kb in size, too big to post to
usenet via AIOE (sorry Dustbin).
So if you want them, get them here:
http://filepost.com/files/e452d11c/Note_3199_copy.rar/
Identified variously as:
- Aspxor (that's new to me)
- BGAC
- Zbot (when in doubt...)
- Zortob
- Weelsof
- KULUOZ
Neither one was detected by malwarebytes.
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)
|