PDF_PHISH.AUSEHY

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.

However, as of this writing, the said sites are inaccessible.

Arrival Details

This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.

Other Details

This Trojan connects to the following possibly malicious URL:

• http://hyp{BLOCKED}rl.co/60wacr
• http://supe{BLOCKED}ma.com/dbcrypts/dbcrypts/dbdrives/index.htm

However, as of this writing, the said sites are inaccessible.

NOTES:
This is the Trend Micro detection for PDF files which shows fake messages when opened. It requires user to click the image in the PDF file. Once clicked, it will access the said URLs.