{"id":85580,"date":"2018-01-29T15:50:35","date_gmt":"2018-01-29T10:20:35","guid":{"rendered":"https:\/\/blogs_admin.quickheal.com\/?p=85580"},"modified":"2018-01-29T15:50:35","modified_gmt":"2018-01-29T10:20:35","slug":"new-fake-resume-email-campaign-infecting-users-smokeloader-malware","status":"publish","type":"post","link":"https:\/\/www.quickheal.com\/blogs\/new-fake-resume-email-campaign-infecting-users-smokeloader-malware\/","title":{"rendered":"New fake resume email campaign infecting users with the SmokeLoader malware"},"content":{"rendered":"

Email attachments are a favorite medium for attackers to deliver malware. They can be used to target a specific user or multiple users at the same time by launching spam email campaigns.<\/p>\n

To succeed in carrying out an intended malware attack, it is necessary that recipients of the malicious email should trust the email and do what the attacker wants him to do. To achieve this, malware authors continuously employ new tactics to make their malicious emails looks as legitimate as possible.<\/p>\n

Quick Heal Security Labs has recently observed a new malicious spam campaign that is spreading the SmokeLoader malware. SmokeLoader is a Trojan downloader malware and is well known for downloading and installing other malware on the infected computer.<\/p>\n

Infection routine<\/strong><\/p>\n

The attack in this campaign starts with a spam email that pretends to be a \u201cWebsite Job application\u201d. This email contains a password-protected zip file. The password to open the zip file is given in the body of the spam email itself. This trick gives the attacker the following advantages:<\/p>\n