Select Page

Cyren Security Blog

Paparazzi catch Berlusconi! (claim of Russian Italian malware emails)

If you believe the email below, the recently-resigned Italian PM has paid a large amount of money to prevent the publication of “images”.

Translation:

Berlusconi has proposed 2 million to hide the images.

Look at this:

This photo has been viewed 8 999 times. Share this link with your friends.

The zipped file is of course malware and we hope recipients didn’t open it or share with their friends as suggested. The emails are delivered with differing text to make them harder to block. One of these variants caught the eye of our alert analysts:

The translation:

Paparazzi finally vpoymali Berlusconi.

Reference:

http://www.exclusiv———/DC009.zip

This photo has been viewed 923 999 times. Share this link with your friends.

Notice that the ever-reliable Google Translate got stuck on the 3rd word. That’s because it’s not Italian but Russian – “Поймали“ means “caught” as in “Paparazzi finally caught Berlusconi”. In other words, those behind the malware outbreak wrote the text in Russian and translated it to Italian – but obviously didn’t review all of the results. Pretty sloppy work guys.

Email text (Italian)

Berlusconi ha proposto 2 milioni di euro per nascondere quelle immagini.

Guarda qui:

Questa foto e stata vista 8 999 volte. Condividi questo link con i tuoi amici.

Or…

Paparazzi infine vpoymali Berlusconi.

di riferimento:

Questa foto e stata vista 923 999 volte. Condividi questo link con i tuoi amici.

You might also like

Square Enix Phishing Campaign

From July 20 until August 16, 2021, Cyren observed a significant increase in the number of Square Enix phishing URLs. The campaign coincided with 14 days of free play announced by Square Enix on July 12, 2021. During this period, we detected a total of 47,076 URLs for...