Home / malware

PDF

Trojan:HTML/Phishbank.AF

First posted on 18 February 2012.
Source: Microsoft

Aliases :

Trojan:HTML/Phishbank.AF is also known as Trojan:HTML/Phishbank.AF (Ikarus).

Explanation :

Trojan:HTML/Phishbank.AF is a spam email message that fraudulently claims to come from the Electronic Payments Association (NACHA.or) regarding Automatic Clearing House (ACH) payment transactions.


Top

Trojan:HTML/Phishbank.AF is a spam email message that fraudulently claims to come from the Electronic Payments Association (NACHA.org) regarding Automatic Clearing House (ACH) payment transactions.

The email may appear similar to the following:



In the example shown above, the link to the "Transaction Report" (report_81863504571550.doc) points to a webpage hosted in the server "leo.ws<removed>.edu.pl".

At the time of this writing, the server is not available.



Analysis by Wei Li

Last update 18 February 2012

 

TOP