Forest Global Training Partners

Cyber Risks · Krebs on Security

Be Wary of ‘Order Confirmation’ Emails

Summary: Malcovery reports that phony "order confirmation" spam campaigns began around Thanksgiving 2014, using booby-trapped links and attached files to infect Windows PCs with Asprox, a Trojan that harvests email credentials and passwords, turns hosts into spam-relaying zombies, and scans websites for vulnerabilities. The emails spoof brands including Target and Walmart and use subject lines such as "Order Confirmation," "Order Status," and "Thank you for your order."

Why it matters: Asprox does not stop at the inbox: it pulls credentials off infected machines and then uses those hosts to scan websites for flaws to hack, so one clicked order confirmation can widen into a foothold that reaches your users and the sites they visit.

Read the original at Krebs on Security ↗

Topics
Malware
Related