August 2010 Archives

The popular file sharing, YouSendIt, has been spoofed by attackers looking for unsuspecting recipients to open the zip file that's sent as an attachment.  The file is named 'YouSendIt_reader.zip' and it's about 10.3KB in size.

<Some Name> has sent you the following via YouSendIt

File attached to this letter.

YouSendIt, Inc. | Privacy Policy
1919 S. Bascom Ave., Campbell, CA 95008

The service, YouSendIt, is the FTP alternative.  Rather than having someone download the file via FTP (username/password), the owner of the file would simply upload the file to the server and, from there, he or she can have the service simply email the file to one or more email recipients.

YouSendIt has close to 12 million users with more than 15 million transfers monthly across 220 countries and is the solution of choice for businesses and independent professionals alike -- the latter including creative designers, photographers, business consultants and media producers. Over 10,000 corporate users from companies including Levi's, Ritz Camera, Vmware, Salesforce, Reuters and Kelly-Moore Paints rely on YouSendIt for the secure delivery of their time sensitive data

Related articles by Zemanta

• Messages with the YouSendIt Reader contains the Bredolab trojan (mxlab.eu)
• YouSendIt abused in a malware and spam distribution (mxlab.eu)

Excess Maximum Return Capital Profit (EMRCP) Project would like to help you achieve this goal for the benefit of both.  Yup, that's the email I gotten today from someone claiming to be part of the EMRCP Project.

Please review the attached copy of the detail and advise on how we can achieve this goal for the benefit of both.

As promised, there was an supposedly document attached to this email labeled as "THE DETAIL.doc" and it's about 25.0KB is size.  The payload's nature is currently unknown of it's intent but you don't click on it to find out on a whim.