OTRO MAIL PHISHING DE DHL QUE ADJUNTA FICHERO ZIP

---

Está llegando masivamente un falso mail phishing de DHL con el siguiente texto:



__________



Asunto: RE: DHL EXPRESS - HEAD OFFICE - AWB Number: 90785XXX - ORIGINAL SHIPPING DELIVERY

De: DHL Customer Support <support_noreply@dhl.com>

Fecha: 16/10/2018 10:18

Para:



Dear Customer,





The shipment (s) Document attached are expected to be delivered to you

today.



--------------------------------------------------------

AWB Number: 90785387011

Pickup Date: 2018-10-17 14:41:09

Description: Original Shipment Document

---------------------- -----------------------------------



DHL Express.



Regards



Thank you for shipping with DHL Express!



CONFIDENTIALITY NOTICE: This message is from DHL and may contain

confidential business information. It is intended only for the use of

the individual to whom it is addressed. If you are not the intended

recipient please contact the sender and delete this message and any

attachment from your system. Unauthorized publication, use,

dissemination, forwarding, printing or copying of this E-Mail and its

attachments is strictly prohibited.



ANEXADO: SKBMT_16_99E19_281652A0_PDF.ZIP (Contiene fichero malicioso de doble extensión SKBMT_16_99E19_281652A0_PDF.exe)



__________





El fichero anexado contiene un fichero con doble extensión, .PDF.EXE para que el usuario crea que es un PDF, mientras que es el EXE el que se ejecuta...



El preanalisis de virustotal ofrece el siguiente informe:



https://www.virustotal.com/es/file/661adfd648c0ee110159caabc547bc1c4bd3b7cc0b0379cbbac737924111e607/analysis/1539683663/



Lo pasaremos a controlar a partir del ELISTARA 39.91 de hoy



saludos



ms, 16-10-2018