IE7.0.exe from admin@microsoft.com - SPAM malware

FYI...

- http://isc.sans.org/diary.html?storyid=2537
Last Updated: 2007-03-29 23:29:59 UTC
"We've received a number of reports of spam appearing to come from "admin@microsoft.com" containing a link to a file called IE7.0.exe ...
File:
Name IE7.0.exe
Size 33280
md5 8e12a8281a6c6ebdbd75c26a93e69437
sha1 de94c34d51e8c04df174e27bc04eed134aca57d7
Date scanned 03/30/2007 00:22:04 (CET)
Norman Sandbox doesn't detect it and it seems to not want to run in certain virtual machines either. Check your logs on proxy servers etc. for IE7.0.exe, it's being hosted in multiple places around the world..."

Fake Internet Explorer 7 Installer Phishing Attacks
- http://www.us-cert.gov/current/#ie7spam
added March 30, 2007

- http://www.f-secure.com/weblog/archi....html#00001155
(Screenshot available.)


:mad: