[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <NHBBKOKFNKAIECDLOKDCCELDEKAA.alerta@redsegura.com>
From: alerta at redsegura.com (Alerta Redsegura)
Subject: Encrypted document
Interesting one.
Kaspersky antivirus says it is "bvblpiewo.exe Suspicion: PSW-Worm".
Supposing the message was automatically generated and not manually crafted,
the bmp-contained password is an interesting feature.
I?igo Koch
redsegura.com
De: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]En nombre de
ge@...tistical.reprehensible.net
Enviado el: mi?rcoles 31 de marzo de 2004 22:18
Para: full-disclosure@...ts.netsys.com
Asunto: [Full-Disclosure] Encrypted document
Please, have a look at the attached file.
In order to read the attach you have to use the following password:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040331/c78ab08e/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/bmp
Size: 2094 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040331/c78ab08e/attachment.bin
Powered by blists - more mailing lists