Return of the mass-mailing malware

by Lennard Cher on August 10, 2010 | Leave a comment

Filed Under: Malware, SophosLabs, Spam

I have not seen a mass mailer for ages. Before fake AVs, they were the one of the most commonly seen malware to pass through SophosLabs. Mass mailers can be hilarious at times, especially when the message body is a funny one. While trawling through spam messages, I had a whiff of nostalgia.

The spam came with a zip attachment and it is detected as W32/MyDoom-Gen and Mal/ZipMal-B. After quick 10 seconds unpacking and analysis <yes, I'm so smart ;)>, it is obvious that the spam was mass-mailed from an infected computer.

ahhhh, I missed you, mass mailers.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <strike> <strong>