Image Has Been Sent – Fake Evernote – Leads To Malware Download

Malware Download

Image has been sent that appears to come from Evernote service [support@evernote.com}] another one from the current bot runs which try to drop loads of other malware on your computer. They are using email addresses and subjects that will entice a user to read the email and open the attachment

Image has been sent < your name>.
DCIM_4199.jpg <http://kingperu.com/1.html >
28 Kbytes
Go to Evernote <http://kingperu.com/1.html>

2021 Evernote. Privacy policy provides our policies and procedures for collecting, using, and disclosing your information.

Users can access the Evernote service (the “Service”) through our website, applications on Devices, through APIs, and through third-parties.

A “Device” is any computer used to access the Evernote Service, including without limitation a desktop, laptop, mobile phone, tablet, or other consumer electronic device.


evernote image has been sent

Following the link in the email sends you to a page offering a download of Vio player ( why on earth anybody would think that they need vio player to view an image in evernote, I really don’t know.

You don’t get the download offering from the original page but that loads 3 sites in the background and you are randomly sent to one of those which will display the

<script src=”http://www.canadian-citizenshiptest.com/Admin/esd.php”></script>
<script src=”http://otrosina.sk/rel.php”></script>
<script src=”http://thetechtroops.com/clk.php”></script>
<script src=”http://www.grandsarovar.com/counter.php”></script>

8 April 2021 : setup.exe (565kb) : Current Virus total detections: 5/51

Total
0
Shares
Leave a Reply

Your email address will not be published.

Related Posts