A new malspam campaign abuses file compression to hoodwink email security filters.
Researchers have identified a new email scam that applies a number of crafty techniques to bypass security filters and infect victims with malware. As described in a blog post from security firm Trustwave, cybercriminals are abusing file compression techniques to smuggle NanoCore malware into inboxes. By concealing the malicious executable within a.zipx file, the scam operators improve their chances of circumventing security protections. The.zipx file is also dressed up as a PDF, complete with an Adobe Acrobat icon, in a bid to trick the victim into opening the attachment without thinking twice.
