October 28, 2013Blog Staff By Blog Staff

Fake WhatsApp ‘Voice Message Notification/1 New Voicemail’ themed emails lead to malware

WhatsApp users, watch out! The cybercriminal(s) behind the most recently profiled campaigns impersonating T-Mobile, and Sky, have just launched yet another malicious spam campaign, this time targeting WhatsApp users with fake “Voice Message Notification/1 New Voicemail” themed emails. Once unsuspecting users execute the fake voice mail attachment, their PCs will attempt to drop additional malware on the hosts. The good news? We’ve got you (proactively) covered.

Sample screenshot of the spamvertised email:


Detection rate for the malicious attachment: MD5: 0458a01e42544eacf00e6f2b39b788e0 – detected by 31 out of 48 antivirus scanners as Trojan.Win32.Sharik.qhd

Once executed, the sample creates the following Registry Keys on the affected hosts:
HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications
HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\S6
HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\S6\Settings

It then attempts to download additional malware from the well known C&C server at networksecurityx.hopto.org

Webroot SecureAnywhere users are proactively protected from this threat.

Share Button

4 Responses to Fake WhatsApp ‘Voice Message Notification/1 New Voicemail’ themed emails lead to malware

  1. Ok so I actually got a fake whatsapp email and they used one of my phone contacts so it looked like it was from her. I click on the sender and it takes me to her contact information on my phone.

  2. i have a voicemail on my WhatsApp and i don’t know how to check it. Can you please email those steps to me please?

Leave a Reply

Your email address will not be published. Required fields are marked *