Data443 & Cyren
Products
- - - Products
    - For OEMs
    - Malware Detection
    - Malware Analysis
    - URL Categorization
    - Email Security
    - Threat Intelligence
    - For Enterprises
    - Malware Analysis
    - Inbox Security for Office 365
    - Threat Intelligence
  - - In the News
      
      Online Businesses Become a Phisher’s Playground
      Not nearly enough businesses have deployed sufficient security measures against phishing attacks through website builders and CMS platforms.Read Article on DarkReading >
      
      Go to Newsroom >
Solutions
- - - Expert Support
      
      Cyren’s dedicated security analysts have the expertise to deeply investigate sophisticated threats – their embedded documents and messy code.
      
      And from their vantage point across companies, geographies, and industries, analysts can track emerging attack vectors and prevent breaches.
      
      “For any false positive or user reported items, we do not need to be involved. Cyren’s dedicated team is on top of all these items.”
      
      via Gartner Peer Insights
Resources
- - - Recent Posts
      - Analyzing behavior to protect against BEC attacks December 22, 2022
      - Using NLP techniques to protect against BEC attacks December 8, 2022
      - Phishing with QR codes December 1, 2022
Company
- - - Company
    - About Cyren
    - Careers
    - Management
    - In the News
    - Contact Us
  - - In the News
      
      Online Businesses Become a Phisher’s Playground
      Not nearly enough businesses have deployed sufficient security measures against phishing attacks through website builders and CMS platforms.Read Article on DarkReading >
      
      Go to Newsroom >
BOOK A DEMO

Select Page

Cyren Security Blog

The Cyren Security Blog is where Cyren engineers and thought leaders provide insights, research and analysis on a range of current cybersecurity topics.

Paparazzi catch Berlusconi! (claim of Russian Italian malware emails)

If you believe the email below, the recently-resigned Italian PM has paid a large amount of money to prevent the publication of “images”.

Translation:

Berlusconi has proposed 2 million to hide the images.

Look at this:

This photo has been viewed 8 999 times. Share this link with your friends.

The zipped file is of course malware and we hope recipients didn’t open it or share with their friends as suggested. The emails are delivered with differing text to make them harder to block. One of these variants caught the eye of our alert analysts:

The translation:

Paparazzi finally vpoymali Berlusconi.

Reference:

http://www.exclusiv———/DC009.zip

This photo has been viewed 923 999 times. Share this link with your friends.

Notice that the ever-reliable Google Translate got stuck on the 3^rd word. That’s because it’s not Italian but Russian – “Поймали“ means “caught” as in “Paparazzi finally caught Berlusconi”. In other words, those behind the malware outbreak wrote the text in Russian and translated it to Italian – but obviously didn’t review all of the results. Pretty sloppy work guys.

Email text (Italian)

Berlusconi ha proposto 2 milioni di euro per nascondere quelle immagini.

Guarda qui:

Questa foto e stata vista 8 999 volte. Condividi questo link con i tuoi amici.

Or…

Paparazzi infine vpoymali Berlusconi.

di riferimento:

Questa foto e stata vista 923 999 volte. Condividi questo link con i tuoi amici.

Jan 4, 2012 | Security Research & Analysis

Categories

You might also like

Analyzing behavior to protect against BEC attacks

Business Email Compromise

Understanding “normal” behaviors in email exchanges are key to combating advanced phishing and BEC attacks by John Stevenson Detecting Business Email Compromise (BEC) In the final part of our series of blogs on Business Email Compromise (BEC), it’s time to look at how...

Using NLP techniques to protect against BEC attacks

Business Email Compromise, Office 365, Phishing

How Natural Language Programming help combat phishing and BEC attacks by John Stevenson Business Email Compromise (BEC) Business Email Compromise (BEC) covers a range of email attacks that typically share a common core attribute. There is no obvious executable...

Phishing with QR codes

Phishing, Security Research & Analysis

Don’t Scan or be Scammed By Maharlito Aquino, Kervin Alintanahin and Dexter To In 1994, a type of the matrix barcode known as the Quick Response code, now widely known as QR code, was invented by Masahiro Hara from a Japanese company Denso Wave. The purpose of the...