Dridex Omicron phishing taunts with funeral helpline quantity

A malware distributor for the Dridex banking malware has been toying with victims and researchers over the previous few weeks. The most recent instance is a phishing marketing campaign that taunts victims with a COVID-19 funeral help helpline quantity.

Dridex is banking malware distributed by phishing emails containing malicious Phrase or Excel attachments. When these attachments are opened, and macros are enabled, the malware might be downloaded and put in on the sufferer’s gadget.

As soon as put in, Dridex will try to steal on-line banking credentials, unfold to different machines, and doubtlessly present distant community entry for ransomware assaults.

COVID-19 Omicron variant used as a lure

Over the previous few weeks, one of many Dridex phishing electronic mail distributors is having enjoyable toying with victims and researchers.

This was first seen when the risk actor started trolling safety researchers by utilizing their names mixed with racist feedback as malware file names and electronic mail addresses.

Earlier this week, the risk actor spammed faux worker termination letters that displayed an alert stating, “Merry X-Mas Pricey Staff!”, after infecting their gadget.

In a brand new phishing marketing campaign found by MalwareHunterTeam and 604Kuzushi, this similar risk actor took it to the subsequent degree by spamming emails with a topic of “COVID-19 testing consequence” that states the recipient was uncovered to a coworker who examined optimistic to the Omicron COVID-19 variant.

“This letter is to tell you that you’ve been uncovered to a coworker who examined optimistic for OMICRON variant of COVID-19 someday between December 18th and twentieth,” reads the brand new phishing electronic mail proven beneath.

“Please check out the small print within the hooked up doc.”

The e-mail features a password-protected Excel attachment and the password wanted to open the doc. As soon as the password is entered, the recipient is proven a blurred COVID-19 doc and is prompted to ‘Allow Content material’ to view it.

So as to add insult to harm, after macros are enabled, and the gadget turns into contaminated, the risk actor taunts their victims by displaying an alert containing the cellphone quantity for the “COVID-19 Funeral Help Helpline.”

With the COVID-19 variant being extremely contagious and quickly spreading worldwide, phishing emails in regards to the Omicron variant have gotten in style and are seemingly extremely efficient in distributing malware.

That is very true if the phishing marketing campaign pretends to be from an organization’s human sources division and targets staff from the identical firm.

 As Dridex phishing campaigns are presently utilizing password-protected attachments, enterprises want to coach their staff to identify and keep away from a lot of these assaults.

As all the time, if you happen to obtain sudden emails or one which incorporates uncommon attachments, all the time attain out to your community admin or different individuals within the office to find out if the e-mail is respectable.