Upatre: .ENC File Extension

Cybercriminals uses different techniques to pass through different kinds of network intrusion defenses the users have in their system to avoid malwares. This time criminals have found a new way to deceive users and be able steal important information by encrypting the file and making it unexecutable with a file extension of either “.ENC” or “.EXE”. These files are known to...

Read More

SPAM: Taxes, allowances and tax credits

I received a new spam mail quite recently stating that I can claim a tax refund. What caught my attention is that it says I have a tax refund from US even if in actuality I have never worked nor paid taxes in the US. Here is a screenshot of the spam mail. This mail has an archived file attached “Refund-Form-ID_0842893.zip” claiming to be a form in which I need to complete...

Read More

Bitcrypt v2.0

Bitcrypt is a ransomware program where in it encrypts certain types of file in the system using RSA public-key cryptography. This malware will display a message offering the user to decrypt the data once the payment is made through Bitcoin. Summary    Upon execution, it will create a thread that will periodically check and terminate running instance of taskmgr.exe...

Read More

Spam mail from fake FedEx

Here is a screenshot of the spam mail which claims to be from FedEx.   You will notice that the email address in the From field is suspicious already since it does not use the fedex.com domain. The ZIP file contains an executable file that is disguised as a PDF file. It uses the double extension .PDF.EXE and uses icon of Acrobat PDF. We currently detect this as...

Read More