3 ms·

But how does it work? do you get infected just by opening the .zip file?

• protomyth 10y ago
  That's how it typically works with e-mail. I see this as an indication that perhaps someone who received the e-mail opened it (since it was part of the leak and not removed by a spam filter). This is why you probably you shouldn't run your own e-mail server if you clearly have no clue. Hiring the correct people does help keep your reputation intact. [edit: down voting for actually answering a question factually - I would love for the open the attachment not to spread viruses - even anti-virus makers don't catch them all]
• atdt 10y ago
  No. The zip file contains a JavaScript file that the user has to click on to get infected. Typically, the target is Windows, which hides the file extension of known file types by default. So the user ends up seeing a file called 'transactions 31234' (actual example), which has an icon depicting a document. Double-clicking on it causes the script to execute in Windows Script Host (WSH), which gives the script access to internal Windows APIs.