They contain zip attachments aptly named ElectionInterference_.zip. The malicious emails come as thread replies, similar to what Emotet does to add legitimacy and make detection harder. Hijacked email threads pushing bogus DocuSign documents
The QBot banking Trojan operators return with yet another themed spam wave using the same hijacked email thread technique enticing victims with malicious election interference attachments.
In this case, we began observing a new spam campaign delivering malicious attachments that exploit doubts about the election process. Those tracking the threat landscape know very well that major world events do not go unnoticed by criminals. As election night ended and uncertainty regarding the results began to creep in, threat actors decided to jump in on it too. The 2020 US elections have been the subject of intense scrutiny and emotions, while happening in the middle of a global pandemic. This blog post was authored by Jérôme Segura and Hossein Jazi.
0 kommentar(er)
