TrendMicro researchers have come across a new spam mail claimed to be from Chinese Ministry of Defense that targets European and Asian Government.
However, it is not that much hard to find the real address of the email. According to TrendMicro report, the emails come from a gmail account which didn't use Chinese name.
"We value Your Feedback very much and have carefully studied the suggestions and advices given back by the attaches and spouses in the feedback." The spam mail reads "China is still a developing country and we are ready to make progress together with our attach?? friends in all the fields of our work"
The attached document attempts to exploit the old Microsoft office vulnerability. The successful exploitation will drop the backdoor in the victim's machine.
The malware is capable of stealing login credentials for websites and email accounts from Internet Explorer and Microsoft Outlook. To make the victims believe that nothing malicious happened, it displays a legitimate dummy document.
The stolen information is then uploaded to two Hong Kong server. The researcher says that message has been sent to 16 European officials and Chinese media organizations.
However, it is not that much hard to find the real address of the email. According to TrendMicro report, the emails come from a gmail account which didn't use Chinese name.
"We value Your Feedback very much and have carefully studied the suggestions and advices given back by the attaches and spouses in the feedback." The spam mail reads "China is still a developing country and we are ready to make progress together with our attach?? friends in all the fields of our work"
The attached document attempts to exploit the old Microsoft office vulnerability. The successful exploitation will drop the backdoor in the victim's machine.
 |
| Spam mails targeting European &Asian Govts -Image Credits: TrendMicro |
The malware is capable of stealing login credentials for websites and email accounts from Internet Explorer and Microsoft Outlook. To make the victims believe that nothing malicious happened, it displays a legitimate dummy document.
The stolen information is then uploaded to two Hong Kong server. The researcher says that message has been sent to 16 European officials and Chinese media organizations.
