Trusted Design

Naw Javascript malware: Fax transmission: - <Random-Digits>

概要

Have also seen delivered to: emailsend@w.e220.<your-domain>.com emailsend@w.e773.<your-Domain>.com MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the subject “Fax transmission: -8947237532-1211276656-2016032127669-67373”. This email is send from the spoofed address “FX Service [emailsend@w.e220.******.com]” and has the following body: Please find attached to this email a facsimile transmission we have just received on your behalf (Do not reply to this email as any reply will not be read by a real person) The attached file F-8947237532-1211276656-2016032127669-67373.zip contains the 8 kB large file FQJ3272114302.js. The malware is detected as HEUR.JS.Trojan.b, JS/Agent.EA!tr, Script.Trojan-Downloader.Agent.MO@gen or Js.Trojan.Raas.Auto by 5 of the 56 AV engines at Virus Total.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• 20160302:Trojan -Ransom :Win32/Crowti (score: 0.66)
• Malware spam: "ATTN: Outstanding Invoices - [4697E0]" (score: 0.63)
• Globeimposter ransomware continues to be delivered via Necurs botnet using fake scanner or printer messages | My Online Security (score: 0.62)
• Malware spam: ATTN: Invoice J-06593788 from random companies (score: 0.62)
• THL 2015-12-22: MetroFax message from "..." - x page(s) (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る