Select your language

Emails spread malware in Dropbox with the help of Bit.ly

There are stories that are repeated in the spread of current criminal malware. From a new complaint received we learned of this new case of (ab)use of (supposedly) reputable Internet resources.

This same year we have reported several cases of abuse of DropBox to host malware and Bit.ly as a shortener and concealer of the real address of the malware:

Trojan spreads using Windows Live/Hotmail accounts and abuses Dropbox.com
http://blog.segu-info.com.ar/2011/05/troyano-se-propaga-usando-cuentas-de.html
Phishing with Trojan hosted on DropBox.com
http://blog.segu-info.com.ar/2011/03/phishing-con-troyano-alojado-en.html
Number of malware downloads from shorteners

The malicious mail that arrives is this:
Correos propagan malware en Dropbox con ayuda de Bit.ly It can be seen that the link to the supposed attached voucher, Deposito14122011.doc, is actually a link http://bitly.com/u[DELETED]E, from the Bit.ly shortener, which leads to http://dl.dropbox.com/u/5[DELETED]5/Deposito14122011.zip which is a banking malware as we checked in VirusTotal where it is barely detected by 2 of 43 antivirus, that is, practically no antivirus. After 12 hours of the complaint made by Segu-Info, the abused resources are still active. This shows that even companies like Bit.ly and Dropbox are not living up to their responsibility. Correos propagan malware en Dropbox con ayuda de Bit.ly

On the other hand and seeing the statistics of Bit.ly on that link, in the last 24 hours there were almost 1500 clicks to that address, which indicates that we must continue to alert and educate people about these tricks used by criminals, about the prudent use of the Internet.

Update 16/12 10hs: the malicious file seems to have been updated and the current one is detected by 15/43 AV in VT where it is identified as a banking Trojan.

- Publicidad -

Update 16/12 10:20hs: the link Bit.ly has been marked as dangerous after 24 hours after the complaint was made. The malicious file in DropBox is still online.

See original.

No comments

• If you're already registered, please log in first. Your email will not be published.

Comments are closed

The comments for this content are closed.

Security becomes a technological platform

Security becomes a technological platform

Mexico. Security is moving from a set of standalone systems to an integrated technology platform that combines artificial intelligence, video analytics, sensors, access control, and data platforms....

Security industry in Mexico and Latin America continues its expansion and professionalization

Security industry in Mexico and Latin America continues its expansion and professionalization

International. The security industry in Mexico and Latin America maintains a growth trend driven by digital transformation, the increase in physical and cyber risks, as well as the need to protect...

Veeam Introduces Agent Commander to Address AI Agent Risks in Enterprise Environments

Veeam Introduces Agent Commander to Address AI Agent Risks in Enterprise Environments

United States. Veeam Software today announced the launch of Agent Commander, a solution aimed at helping organizations detect risks associated with artificial intelligence, protect AI-based systems...

Key and asset management, the key to optimizing operations in logistics, distribution and construction companies

Key and asset management, the key to optimizing operations in logistics, distribution and construction companies

In industries where every minute counts, efficient asset and resource management has become a strategic factor to ensure operational continuity, safety, and productivity. By: Héctor Meléndez,...

Genesis Security Reduces False Alarms by 62% Through Milestone Integration and Actuate AI Analytics

Genesis Security Reduces False Alarms by 62% Through Milestone Integration and Actuate AI Analytics

Puerto Rico. A centralized monitoring operation developed by Genesis Security was able to significantly reduce the volume of false alarms in its security systems, thanks to the integration of...

Case study: Solar cameras and thermal intelligence optimize the safety of aquaculture farms

Case study: Solar cameras and thermal intelligence optimize the safety of aquaculture farms

Türkiye. An open-ocean fish farming farm in Turkey implemented a smart surveillance system based on Dahua solar cameras, thermal monitoring, and wireless data transmission to improve safety and...

 The Hidden Security Gap in Data Centers

The Hidden Security Gap in Data Centers

Imagine the journey of an authorized technician inside a data center. When he arrives, he presents his credential and enters the premises, and before entering the server corridor he needs a key to...

Digital fraud increased at Christmas

Digital fraud increased at Christmas

Colombia. During the holiday season, as e-commerce and digital transactions intensified, online fraud attempts also increased. Fake promotions, impersonation of businesses and messages that...

Milestone XPerience Days arrived in Mexico City with innovations in intelligent video management

Milestone XPerience Days arrived in Mexico City with innovations in intelligent video management

Mexico. Milestone Systems, a leading provider of open platform video management software (VMS), hosted the Milestone XPerience Days Mexico 2025 event, a gathering that brought together industry...

Hikvision Mexico launches the third edition of

Hikvision Mexico launches the third edition of "Hikvision Women"

Mexico. Hikvision Mexico announced the launch of the third edition of its "Hikvision Women" program, an initiative aimed at strengthening the participation and professional development of women in...

Suscribase Gratis
Remember Me
SUBSCRIBE TO OUR ENGLISH NEWSLETTER
DO YOU NEED A SERVICE OR PRODUCT QUOTE?
LATEST INTERVIEWS
SITE SPONSORS










LATEST NEWSLETTER
Latest Newsletter