New Pandex campaign (repost due to ealier post being borked)

Not major news, but there’s a new Pandex campaign going around (Pandex is a trojan that turns your machine into a spam zombie).

Typical spam email looks like this:

(Image thumbnailed due to offensive content.)

The URL typically points to a compromised site hosting the trojan. The trojan has also been observed as an attachment to the same email.

Virus detection is fairly weak on at least one of the samples we checked. (one sample: VT and Sandbox report).

Alex Eckelberry

New Pandex campaign (repost due to ealier post being borked)