full-disclosure - Anyone else seeing MyWork.zip

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <D168146C766DB6419772F0D1006531C90E41E4@blmms060.accounts.root.corp>
From: nathan.risser at express-scripts.com (Risser, Nathan (BLM))
Subject: Anyone else seeing MyWork.zip - Modified Wdialupd virus?

I'm just curious if anyone else is seeing this activity:

My Antigen (flame suit donned, but will not participate in a battle)
setup has trapped a few messages that contain MyWork.zip attachment.  It
gets trapped the same way that MyMovie.zip is trapped and looks like the
author has changed/added another variant of what F-Secure has named
"Wdialupd" 
<http://www.europe.f-secure.com/v-descs/wdialupd.shtml>.

Each of the messages I've received have the same subject "Sorry i am
late...".

Nate
******* Confidentiality Notice *******
This email, its electronic document attachments, and the contents of its website linkages may contain confidential health information.  This information is intended solely for use by the individual or entity to whom it is addressed.  If you have received this information in error, please notify the sender immediately and arrange for the prompt destruction of the material and any accompanying attachments.

******* Avis de confidentialite *******
Ce courriel ainsi que tout document y etant joint de meme que le contenu des liens vers des sites Web peuvent reunir des renseignements  confidentiels sur la sante.  Cette information s'adresse uniquement a l'usager ou a l'organisation auxquels elle est destinee.  Si vous avez recu ce message par erreur, veuillez en aviser l'expediteur immediatement et proceder a la suppression du document et des fichiers joints sans tarder.