An email circulating as an Amazon purchase confirmation injects malware that steals a user's cryptocurrency. Interestingly, it affects more than just bitcoin, it has been found to be effective in pilfering dogecoin, dashcoin, paycoin, litecoin and many others.
The email has a .doc attached which claims to have shipping and tracking information. The .doc has contains the virus which can only be activated if macros on MS Word have been enabled on the host machine.
The malware looks to steal Outlook passwords, along with those stored by browsers such as Opera, Firefox, Chrome and IE. It also looks to harvest login account credentials for cloud storage programs. The final step is to seek out popular cryptocurrency wallets such as Ethereum and Multibit in order to transfer the funds.
The
messages simply state that ‘your order has been confirmed’ and contains
a small amount of details. The user being targeted is directed to an
attached .doc file for the shipping and tracking details.' - See more
at:
http://www.information-age.com/technology/security/123459655/new-amazon-email-scam-after-your-cryptocurrency#sthash.3uZ5ewq2.dpuf
email
security firm AppRiver has issued warnings about a malicious email
circulating posing as an Amazon purchase confirmation. Once opened, it
injects malware that pilfers for just about every type of cryptocurrency
in existence. - See more at:
http://www.information-age.com/technology/security/123459655/new-amazon-email-scam-after-your-cryptocurrency#sthash.3uZ5ewq2.dpuf
email
security firm AppRiver has issued warnings about a malicious email
circulating posing as an Amazon purchase confirmation. Once opened, it
injects malware that pilfers for just about every type of cryptocurrency
in existence.
'Over the past week we have been monitoring (and blocking) a stream of malicious emails attempting to pose as legitimate Amazon purchase confirmations,' confirmed Troy Gill, AppRiver's manager of security research. 'The messages simply state that ‘your order has been confirmed’ and contains a small amount of details. The user being targeted is directed to an attached .doc file for the shipping and tracking details.'
- See more at: http://www.information-age.com/technology/security/123459655/new-amazon-email-scam-after-your-cryptocurrency#sthash.3uZ5ewq2.dpuf
'Over the past week we have been monitoring (and blocking) a stream of malicious emails attempting to pose as legitimate Amazon purchase confirmations,' confirmed Troy Gill, AppRiver's manager of security research. 'The messages simply state that ‘your order has been confirmed’ and contains a small amount of details. The user being targeted is directed to an attached .doc file for the shipping and tracking details.'
- See more at: http://www.information-age.com/technology/security/123459655/new-amazon-email-scam-after-your-cryptocurrency#sthash.3uZ5ewq2.dpuf
0 comments:
Post a Comment