Junk mail with free USB pendrive loaded with malware


I've got to worry about this attack. My MD was sent a USB pendrive in a box with corporate literature from "Tune-into-it.com". Unusually :-D the literature didn't express what Tune-into-it.com does, so my MD trashed the literature and kept the pen drive for later viewing. Today he viewed the USB pendrive and instantly the Trend Anti Virus found


Now what worries me is was either a,
  • A targeted attack aimed my MD.
  • A attack against my company.
  • or a mass junkmail attack.
  • Or Tune-into-it.com is vaild company and have unfortunately been infected with a virus.
Either way it was well funded with glossy corporate literature, USB pendrive with Tune-into-it.com printed on it and sent in the post!. Check their website, it looks professional but doesn't tell you what they actually do!

Unfortunately I didn't get to the pendrive before it was formatted and blanked by a colleague. Just goes to prove that my Firewall and AntiVirus mail filter doesn't catch everything, just sent it in the post and ask the MD to run it! Simple! . I'm pretty sure I would have probably done the same thing, so be warned!

apaton

Comments

Post a Comment

Popular posts from this blog

Solaris 11 Locale en_GB.UTF-8 / en_GB.ISO8859-1 / en_GB.ISO8859-15

When you install Solaris 11/11 from standard text installer cdrom, the en_GB-UTF-8 locales are not installed, even if you select British locales on install. EDIT 4th FEB 2018 - Still valid for Solaris 11.4 Beta.  To make sure packages are have the correct localisation, IPS uses facet as a localisation personality. $ pkg facet FACETS VALUE facet.locale.pt_BR True facet.locale.es_ES True facet.locale.en_US True facet.locale.zh_TW True facet.locale.zh_CN True facet.locale.de_DE True facet.locale.fr_FR True facet.locale.it_IT True facet.locale.ko_* True facet.locale.ja_* True facet.locale.es True facet.locale.de True facet.locale.zh True facet.locale.ko True facet.locale.it True facet.locale.pt True facet.locale.fr True facet.locale.en True facet.locale.ja True facet.locale.* False As you can see no en_GB is described and " facet.locale.* False " is a deny everything else rule. So let change this. I'm assuming you have a Solaris 11 repository already ...
Read more

Scheduled network capture on Windows using Wireshark (tshark.exe)

A customer had an iSCSI issue and was required to capture network packets at a specific time on a Windows 2008 server. I came up with simple method using Wireshark's tshark.exe and Windows scheduler "AT". at cmd /c c:\capture.bat type c:\capture.bat rem Capture WireShark example rem Andy Paton rem WTL rem use AT to run batch rem example at 01:50 cmd /c c:\capture.bat rem debug at issues rem example at 09:50 /interactive cmd /k c:\capture.bat rem -a duration:1200 in seconds rem -B Buffer Size - default is 1Mb rem -i Interface number - use "tshark.exe -D" to list interface numbers rem -n don't resolve IP addresses rem -q Quiet output rem -w output file rem capture filter "host " c:\"Program Files"\Wireshark\tshark -a duration:1200 -B 2 -i 4 -n -q -w c:\network.out host 192.168.1.1
Read more

[Linux] X-server ScreenShots from the CLI "ImageMagick"

Build some documentation for a customer and required some screenshots, KDE has Ksnaphot . But I wanted many screen shots and need a simple cli command to capture various screens. ImageMagik provides the " import " command which does just the job from the command line. To capture the whole desktop as a JPEG use the following. $ import -window root screen.jpg To save in a diffrent grapics format change the extention of the output file. (gif,pnm,pmm,tiff etc..) To capture single window ie firefox You need to find the window name, two methods of getting the "window name" 1. use xwininfo, which will then ask you to click target window and display information. 2. xlsclients -l display list of windows Note you can use a window title or the DECIMAL window ID, xwininfo and xlsclients output in HEX. $ import -window WINDOW ID DECIMAL > screen1.jpg $ import -window " WINDOWS TITLE >" screen2.jpg
Read more