Displaying items by tag: Email Security

There is an old saying that says, when you can no longer do, you teach. This might be a relatively true axiom in the regular world, but in the world of cybercrime it is certainly not what you find happening. Instead, we tend to see that when organized groups no longer want the headache and hassle of doing the heavy lifting for attacks, they just build a platform to sell their tools to others. We have seen ransomware as a service, malware as a service, malvertising as a service, and even phishing as a service.

Leveraging the hype around the 2012 Olympics in London cyber criminals are pushing out malware via spam emails claiming that Gabrielle Douglas, who won a gold medal in Women's  Gymnastics All Around, will face lifetime ban from sport.  Obviously they are expecting that false news about doping scandals will help a lot in spreading the malware. The email is suggesting a link that will open up a false youtube page and prompt you to download  Adobe Flash plugin to view the content. Sophos, which first reported on this spam, detects the malware as Troj/Agent-XIK and Troj/JSRedir-IA.