News of the Cyber World

[kyonides]

IcedID The Banking Trojan

If you recall the story of the fall of Troy according to Homer, if I remember clearly, anything related to Trojans aren't good at all.

https://www.cyberscoop.com/icedid-bankin...reat-labs/

In one case, fake invoice emails from student tutoring company, PrepNow, were sent to customers laced with malicious .zip attachments. Those email addresses, Juniper Threat Labs says, were previously compromised.
PrepNow did not immediately return request for comment.
If victims click through the .zip file, they will be presented with a manipulated Microsoft Word document requesting they enable macros. If they do so, they will be targeted with the new second stage downloader, the malicious DLL, which will download the next malicious component of the attack, the IcedID malware.

You see they even made the ZIP file password protected!
No matter if the email says it comes from a known source and you need to download and open that file, make sure it's not virulent!
Is it a Word document or an Excel spreadsheet? Is it asking you to enable macros?  
You better scan it many times if deemed necessary... or fear the IcedID!

I wish it were some Iced Tea instead.

Even so I'll leave you, lazy readers, another sign of danger the email might include.

But for people who have some sort of awareness about phishing, the email body is too minimalist to not trigger suspicion.

Still, Hadad claims they should have stopped for good. Let's hope he isn't wrong about this.