{"id":8827,"date":"2012-11-27T12:00:52","date_gmt":"2012-11-27T19:00:52","guid":{"rendered":"http:\/\/blog.webroot.com\/?p=8827"},"modified":"2018-10-05T11:52:53","modified_gmt":"2018-10-05T17:52:53","slug":"cybercriminals-target-u-k-users-with-bogus-pay-by-phone-parking-receipts-serve-malware","status":"publish","type":"post","link":"https://www.webroot.com/blog/2012\/11\/27\/cybercriminals-target-u-k-users-with-bogus-pay-by-phone-parking-receipts-serve-malware\/","title":{"rendered":"Cybercriminals target U.K users with bogus &#8216;Pay by Phone Parking Receipts&#8217; serve malware"},"content":{"rendered":"<p>U.K users, beware!<\/p>\n<p>Cybercriminals are currently mass mailing yet another malicious spam campaign, enticing users into viewing a bogus list of parking transactions. Upon executing the malicious attachment, the malware opens a backdoor on the affected host, allowing the cybercriminals behind the campaign complete access to the host.<\/p>\n<p>More details:<\/p>\n<p><!--more--><\/p>\n<p><strong>Sample screenshot of the spamvertised email:<\/strong><\/p>\n<p style=\"text-align: center;\"><a href=\"http:\/\/webrootblog.files.wordpress.com\/2012\/11\/uk_pay_by_phone_receipt_email_spam_malware.png\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-8829\" title=\"UK_Pay_By_Phone_Receipt_Email_Spam_Malware\" src=\"http:\/\/webrootblog.files.wordpress.com\/2012\/11\/uk_pay_by_phone_receipt_email_spam_malware.png\" alt=\"\" width=\"266\" height=\"149\" \/><\/a><\/p>\n<p>Sample detection rate for the malicious attachment:\u00a0<a href=\"https:\/\/www.virustotal.com\/file\/2e8f3a5fd6605821fbf071c1da6b90cb18903a433cf44776432625a4a1e58727\/analysis\/1353772427\/\"><strong>MD5: fbde5bcb8e3521149d2f83888e1716c4<\/strong><\/a> &#8211; detected by 38 out of 44 antivirus scanners as Worm:Win32\/Gamarue.I<\/p>\n<p><a href=\"https:\/\/www.webroot.com\/us\/en\/home\/products\/complete\"><strong>Webroot SecureAnywhere<\/strong><\/a>\u00a0users are proactively protected from this threat.<\/p>\n<p><em>You can find more about Dancho Danchev at his\u00a0<a href=\"http:\/\/linkedin.com\/in\/danchodanchev\"><strong>LinkedIn Profile<\/strong><\/a>. You can also\u00a0<a href=\"http:\/\/www.twitter.com\/danchodanchev\"><strong>follow him on \u00a0Twitter<\/strong><\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>U.K users, beware! Cybercriminals are currently mass mailing yet another malicious spam campaign, enticing users into viewing a bogus list of parking transactions. Upon executing the malicious attachment, the malware opens a backdoor on the affected host, allowing the cybercriminals behind the campaign complete access to the host. More details:<\/p>\n","protected":false},"author":65,"featured_media":17052,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3005],"tags":[],"yst_prominent_words":[3929,5593,11065,3881,5411,12295,4065,5723,3477,12531,3875,12529,12527,3529,3471,3525],"acf":[],"_links":{"self":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/8827"}],"collection":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/users\/65"}],"replies":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/comments?post=8827"}],"version-history":[{"count":2,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/8827\/revisions"}],"predecessor-version":[{"id":25537,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/8827\/revisions\/25537"}],"wp:featuredmedia":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media\/17052"}],"wp:attachment":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media?parent=8827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/categories?post=8827"},{"taxonomy":"post_tag","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/tags?post=8827"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/yst_prominent_words?post=8827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}