Wang Chun-Yu mark this message contains true information
｜originally written by Wang Chun-Yu
原文來自國外資安網站Trustwave "因為現在資安網站TrustWave發現，有惡意人士假冒微軟的名義，發送網路釣魚郵件藉此散播惡意勒索病毒的活動攻擊","郵件中還夾帶藏有惡意勒索軟體的附件檔案，並會假冒.jpg的格式"等文句與原文中 "The email, claiming to be from Microsoft, contains just one sentence in its email body which starts with two capital letters. It directs the recipient's attention to the attachment as the “latest critical update”."，"The fake update attachment, although having a “.jpg” file extension, is an executable file. Its filename is randomized and its file size is around 28KB. This executable file is a malicious .NET downloader that will deliver another malware to the infected system." 表達同一種意思
Fake Windows Update Spam Leads to Cyborg Ransomware and Its Builder
Recently, fake Microsoft Windows Update emails were spammed with the following subject lines: Install Latest Microsoft Windows Update now! Critical Microsoft Windows Update!
Figure 1: Trustwav
