Search FraudFYI

Monday, August 29, 2016

MALWARE ALERT! MALWARE email from Ana Rohmawan Carlisle Productos de Mexico commercial@ptsuparmatbk.com www.tscl.com.bd

DO NOT DOWNLOAD OR OPEN THE .HTML FILE ATTACHED TO THIS EMAIL!  The .html file contains a link to http://tscl.com.bd/z/QUOTATION ORDER.zip and MALWARE that has been flagged by multiple engines as containing a TROJAN VIRUS which can be very harmful to your computer/device! 

Per VirusTotal.com:

URL Scanner     Result
Dr.Web     Malicious site
BitDefender     Malware site
ESET     Malware site
Fortinet     Malware site
Antivirus     Result     Update
AhnLab-V3     Trojan/Win32.ZBot.C715770     20160829
Avast     Win32:Evo-gen [Susp]     20160829
Avira (no cloud)     TR/Dropper.Gen     20160829
Baidu     Win32.Trojan.WisdomEyes.151026.9950.9999     20160829
ESET-NOD32     a variant of MSIL/Injector.OBU     20160829
Fortinet     MSIL/Injector.OBU!tr     20160829
Ikarus     Trojan.MSIL.Injector     20160829
Invincea     trojan.win32.skeeyah.a!rfn     20160829
Kaspersky     HEUR:Trojan.Win32.Generic     20160829

If you have clicked this link, run a full virus scan as soon as possible.  You can download free versions from safe websites such as https://www.malwarebytes.org/ and http://free.avg.com/us-en/homepage


Originating IP: 41.58.10.80
Originating ISP: Swiftng
City: Lagos
Country of Origin: Nigeria

from: commercial <commercial@ptsuparmatbk.com> 
to: 
date: Sun, Aug 28, 2016 at 11:15 PM
subject: Product List
mailed-by: ptsuparmatbk.com

Dear Sir,

Please see attached the new order and advise if shipment can be made early.

Details mentioned in the attached.

I wait for your reply immediately.

Ana Rohmawan
Carlisle Productos de Mexico S de R.L. de C.V.
Av. Alejandro Dumas 11331
Complejo Industrial Chihuahua
Chihuahua, Mexico
C.P. 31136
Phone: 011 (52) 614 442-20-00

attachment; filename="Product List.html"
<META HTTP-EQUIV="Refresh" CONTENT="1;URL=http://tscl.com.bd/z/QUOTATION ORDER.zip" >

No comments:

Post a Comment

Thank you for commenting! Your comment will be reviewed and posted shortly!