Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Renama.A -- Replies to Outlook email messages and uses ZIP attachments

 Renama.A can reply to Outlook emails (so it looks more legitimate than regular spam) & it uses ZIP attachments. It can also spread across unprotected network shares.   

QUOTE: This new virus goes through the MS Outlook inbox, and replies to any emails found. The email will have the following properties:

Subject - One of the following:

[NAME], your name is listed in terrorism organisation..!!!
[NAME], this file from me (%s)
*** Note: [NAME] is taken from the contents of the user's emails.


Message - One of the following:

1. if you are not sure, please read attachment bellow, and please reply to me..!!! this message is very urgent..!!!! hope we don't have miss understanding thank's...!!!

2.This attachment contain listname of terrorist..!!! hope you can be carrefull if you find one of them..!!!! or you can reply this email to me after you read the attachment thank's...!!!


Attachment: [RANDOM].zip

Renama.A: Replies to email & uses ZIP files
http://secunia.com/virus_information/27783/renama.a/
http://www.sarc.com/avcenter/venc/data/w32.renama.a@mm.html