{"id":1018,"date":"2016-08-29T07:07:26","date_gmt":"2016-08-29T15:07:26","guid":{"rendered":"http:\/\/www.scamdex.com\/ScamBlog\/?p=1018"},"modified":"2016-08-29T07:28:59","modified_gmt":"2016-08-29T15:28:59","slug":"1018","status":"publish","type":"post","link":"https:\/\/scamdex.com\/ScamBlog\/2016\/08\/1018\/","title":{"rendered":"Voice Message Notification Email Warning Could Be Ransomware"},"content":{"rendered":"<table width=\"100%\">\n<tbody>\n<tr>\n<td><strong>Voice Message Notification Email Warning Could Be Ransomware<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Don&#8217;t play voice mail messages from suspicious sources.<\/p>\n<blockquote><p>Xavier Mertens at the SANS Internet Storm Center:<\/p>\n<p>&#8220;Bad guys need to constantly find new ways to lure their victims. If billing notifications were very common for a while, not all people in a company are working with such kind of documents. Which types of notification do they have in common? All of them have a phone number and with modern communication channels&#8230; everybody can receive a mail with a voice mail notification. Even residential systems can deliver voice message notifications.&#8221;<\/p>\n<p>One of the currently most prevalent ransomware strains called Cerber has even experimented with text-to-speech synthesizers to threaten victims to pay the ransom.<\/p>\n<p>This new voice mail attack email arrives with an attachment, which supposedly contains a voice message, in a .wav file compressed in .zip folder. The folder actually contains hidden malicious code that will install ransomware and renames files to [original file name].crypted.<\/p>\n<p>The delivery mechanism may be exploiting the fact that missed call notification emails are enabled by default in Microsoft Outlook.<\/p>\n<p>Consumers appear to be the first target of this ransomware campaign according to Mertens. The initial phishing attack campaign contained a voice message regarding a modem from Vigor, a UK distributor of ADSL modems for the residential market.<\/p>\n<p>Here is the blog post with a screenshot, showing how this looks:<br \/>\n<a href=\"https:\/\/blog.knowbe4.com\/heads-up-voice-message-notification-email-warning-could-be-ransomware\">https:\/\/blog.knowbe4.com\/heads-up-voice-message-notification-email-warning-could-be-ransomware<\/a><\/p><\/blockquote>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>Voice Message Notification Email Warning Could Be Ransomware Don&#8217;t play voice mail messages from suspicious sources. Xavier Mertens at the SANS Internet Storm Center: &#8220;Bad guys need to constantly find new ways to lure their victims. If billing notifications were very common for a while, not all people in a company are working with such [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[10],"tags":[],"_links":{"self":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts\/1018"}],"collection":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/comments?post=1018"}],"version-history":[{"count":2,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts\/1018\/revisions"}],"predecessor-version":[{"id":1025,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/posts\/1018\/revisions\/1025"}],"wp:attachment":[{"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/media?parent=1018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/categories?post=1018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scamdex.com\/ScamBlog\/wp-json\/wp\/v2\/tags?post=1018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}