Select your language

Emails spread malware in Dropbox with the help of Bit.ly

There are stories that are repeated in the spread of current criminal malware. From a new complaint received we learned of this new case of (ab)use of (supposedly) reputable Internet resources. This same year we have reported several cases of abuse of DropBox to host malware and Bit.ly as a shortener and concealer of the real address of the malware: Trojan spreads using Windows Live / Hotmail accounts and abuses Dropbox.com...

Full content of the post in... There are stories that are repeated in the spread of current criminal malware. From a new complaint received we learned of this new case of (ab)use of (supposedly) reputable Internet resources.

This same year we have reported several cases of abuse of DropBox to host malware and Bit.ly as a shortener and concealer of the real address of the malware:

Trojan spreads using Windows Live/Hotmail accounts and abuses Dropbox.com
http://blog.segu-info.com.ar/2011/05/troyano-se-propaga-usando-cuentas-de.html
Phishing with Trojan hosted on DropBox.com
http://blog.segu-info.com.ar/2011/03/phishing-con-troyano-alojado-en.html
Number of malware downloads from shorteners

The malicious mail that arrives is this:
Correos propagan malware en Dropbox con ayuda de Bit.ly It can be seen that the link to the supposed attached voucher, Deposito14122011.doc, is actually a link http://bitly.com/u[DELETED]E, from the Bit.ly shortener, which leads to http://dl.dropbox.com/u/5[DELETED]5/Deposito14122011.zip which is a banking malware as we checked in VirusTotal where it is barely detected by 2 of 43 antivirus, that is, practically no antivirus. After 12 hours of the complaint made by Segu-Info, the abused resources are still active. This shows that even companies like Bit.ly and Dropbox are not living up to their responsibility. Correos propagan malware en Dropbox con ayuda de Bit.ly

On the other hand and seeing the statistics of Bit.ly on that link, in the last 24 hours there were almost 1500 clicks to that address, which indicates that we must continue to alert and educate people about these tricks used by criminals, about the prudent use of the Internet.

- Publicidad -

Update 16/12 10hs: the malicious file seems to have been updated and the current one is detected by 15/43 AV in VT where it is identified as a banking Trojan.

Update 16/12 10:20hs: the link Bit.ly has been marked as dangerous after 24 hours after the complaint was made. The malicious file in DropBox is still online.

See original.

No comments

• If you're already registered, please log in first. Your email will not be published.

Comments are closed

The comments for this content are closed.

Investing in Access Controllers: Why Eliminating Them Can Be a Strategic Mistake

Investing in Access Controllers: Why Eliminating Them Can Be a Strategic Mistake

Thanks to technological evolution, today there are smart readers with the capacity to process credentials, store information and even operate locks autonomously. This has led many organizations to...

Case study: How did a retail chain in Costa Rica reduce fraud by 18%?

Case study: How did a retail chain in Costa Rica reduce fraud by 18%?

Almacenes El Rey is a rapidly expanding department store, with 18 branches nationwide and more than one million customers each year. Thanks to the Avigilon Unity Video solution, the retail chain...

Is storing video no longer enough? Milestone's Sales Director for Latam speaks

Is storing video no longer enough? Milestone's Sales Director for Latam speaks

Latin America. Johana Arias, an executive at Milestone Systems, discusses how the integration of AI, natural language, and open platforms are transforming video into actionable insights for...

Anti-intrusion system described as one of Ajax's largest in South America

Anti-intrusion system described as one of Ajax's largest in South America

Argentina. The Bayron company installed a protection system with more than 85 Ajax wireless devices in the new branch of Autos del Sur S.A., Toyota's official dealership in the country.

Interview with Manuel Carlos, Senior Sales Director for Mexico at Hanwha Vision

Interview with Manuel Carlos, Senior Sales Director for Mexico at Hanwha Vision

Mexico. Manuel Carlos, an executive at Hanwha Vision, details how the company is revolutionizing electronic security by consolidating generative artificial intelligence and processing at the edge.

Prosegur presents new capabilities in cybersecurity and automation

Prosegur presents new capabilities in cybersecurity and automation

International. Prosegur Security has created two new modules, xCope and xEcute, which aim to provide companies and organizations with a new corporate digital surveillance service and another for...

Access and video platform

Access and video platform

Johnson Controls Designed to take the complexity out of legacy systems, the latest version of C•CURE IQ helps organizations achieve faster response, simplify workflows, and turn safety data into...

SIA presents the new directives of its International Relations Committee

SIA presents the new directives of its International Relations Committee

Latin America. Mariana Ramírez is the new president of the International Relations Committee of the Security Industry Association (SIA), while Vanesa Cabral assumed the role of vice president.

Access management and security in stadiums during the World Cup

Access management and security in stadiums during the World Cup

International. With the World Cup underway, stadium operation and the management of credentials and critical assets become key factors in ensuring security in high-demand environments.

Jovicard modernizes its headquarters with HID access control technology

Jovicard modernizes its headquarters with HID access control technology

Brazil. Jovicard, which specializes in physical access control, secure identity, biometrics and integrated electronic security, completed the modernization of its corporate headquarters with trusted...

Suscribase Gratis
Remember Me
SUBSCRIBE TO OUR ENGLISH NEWSLETTER
DO YOU NEED A SERVICE OR PRODUCT QUOTE?
LATEST INTERVIEWS
SITE SPONSORS










LATEST NEWSLETTER
Latest Newsletter