Nemucod.js

yes, there will be probably more undetected files by fileShield similar to these ones but all these files are covered by MailShield which block this attack, because it is the attack vector

TrueIndian · 2017-02-20T12:15:42.000Z

Sirmer post:7:

yes, there will be probably more undetected files by fileShield similar to these ones but all these files are covered by MailShield which block this attack, because it is the attack vector

True but the one I posted came from sendgrid ad redirect.

Pondus · 2017-02-20T23:22:17.000Z

TrueIndian post:6:

Hi Sirmer and others,

I found one of this that doesn’t spread from email directly but a malicious link,see:
https://www.virustotal.com/en/url/21746490ffe6b154dd8404101bbafa343e9cb7304b060b9c13f05e03346eec77/analysis/1487581361/

Wrote some metadata to virustotal file analysis:
https://www.virustotal.com/en/file/ca59bc2a16df94b1d71d5587dbbcb672e5a91443c045ae711a0141dc8f36bb47/analysis/1487572098/

The PayLoad is not detected … yet
https://www.virustotal.com/en/file/bae249fb9a839b7e43f112efcc7b93d999318d578890e30785255c04e63ae685/analysis/1487629173/

TrueIndian · 2017-02-21T01:10:45.000Z

Avast is detecting the js file now

Announcements