Case Study: Fake Codec Leveraging LastFM
ID: 05fde9f7-e125-55cb-8e8a-e453891d4249
STIX ID: report--05fde9f7-e125-55cb-8e8a-e453891d4249
Feed Name: Zscaler Security Research Blog
Threat Score
This report details a Fake Codec/Fake Anti-Virus social engineering campaign that used LastFM profiles to lure victims to redirector pages which chained 302 redirects to malicious download sites; samples (MD5s provided) were NSIS-packed installers that dropped a DLL to %AppData% and added an autorun registry entry, with domains and IPs tied to a Rusian dedicated hosting provider historically used for abuse.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.