分析者: Jan Lemuel Gonzalvo
A number of users may receive an email on a supposed confirmation for their parcel delivery. This spammed message contains a .zip file that has another .zip file in it. The said .zip file has a .lnk (a file extension used by Microsoft to link to an executable file) file attachment. In this case, the said executable is a variant of the Locky ransomware family. The ransomware has the capability to lock user's machine and change desktop background with an image of a ransomware note. The note indicates instructions on how the user can decrypt files through payment.


Users should be aware of unsolicited emails and never open any attachments therein. Employing security solutions with anti-spam and anti-malware techniques provide a proactive defense against such threat.

 垃圾邮件阻止日期/时间 : 2017年1月25日 0:44:00 GMT-8
 TMASE
  • TMASE引擎（全局:8.0
  • TMASE样式（全局）:2844