{"id":83,"date":"2008-09-22T09:24:55","date_gmt":"2008-09-22T00:24:55","guid":{"rendered":"http:\/\/www.joewein.net\/blog\/?p=83"},"modified":"2008-09-22T09:24:55","modified_gmt":"2008-09-22T00:24:55","slug":"beware-of-fake-kaspersky-beta-installer-emails","status":"publish","type":"post","link":"https:\/\/joewein.net\/blog\/2008\/09\/22\/beware-of-fake-kaspersky-beta-installer-emails\/","title":{"rendered":"Beware of fake Kaspersky beta installer emails"},"content":{"rendered":"

Today I received a Trojan email that bears the same handwriting as the recent fake Google Chrome installer emails<\/a>. Both emails are in German, offer an attached RAR file with what supposedly is an installer for a beta test version of new software from a well-established software company:<\/p>\n

\n

Sehr geehrter Nutzer,<\/p>\n

heute m\u00f6chten wir Sie zu unserem Aktuellen Betatest des neuen Kaspersky\u00a9 9.5.710 einladen.
\nUnser neues Produkt besticht durch seine \u00fcberarbeitete Scanroutine sowie die schnelle und effektive
\nAufsp\u00fcrung von Viren, Trojaner und anderer b\u00f6swilliger Maleware.<\/p>\n

F\u00fcr ihren pers\u00f6nlichen Zugang haben wir ihnen ein Beta Account eingerichtet welchen Sie bei der
\nInstallation angeben m\u00fcssen, um den Webinstaller sowie das Programm an sich nutzen zu k\u00f6nnen.<\/p>\n

Benutzername: kis_aX9535
\nPasswort: c3VF5gg8<\/p>\n

Diese Daten werden bei der Installation abgefragt. Notieren Sie sich diese Daten bitte genau,
\nda diese auch f\u00fcr ihren Zugang auf unserer Seite erforderlich sind.<\/p>\n

Zum Ende des Betatests bekommen Sie eine Volllizenz und k\u00f6nnen somit Kaspersky\u00a9 ein
\nJahr kostenlos f\u00fcr ihre Sicherheit nutzen.<\/p>\n

Sollten Sie Fragen oder Probleme haben, so schreiben Sie und eine Mail an: beta-team@kaspersky.de<\/p>\n

Wir w\u00fcnschen Ihnen nun viel Spass mit unserem neuem Produkt und hoffen auf eine Positive Wertung
\nvon ihnen auf unserer Website.<\/p>\n

Mit freundlichen Gr\u00fc\u00dfen
\nIhr Kaspersky Beta Team<\/p>\n

Copyright \u00a9 1997 – 2008 Kaspersky Lab <\/p>\n

Industry Leading Antivirus Software<\/p><\/blockquote>\n

Message headers:<\/p>\n

Received: from mo-p05-ob.rzone.de (mo-p05-ob.rzone.de [81.169.146.182])
\n\tby mail.joewein.net (Ogose Mail Daemon) with ESMTP id 818CC10DCC78
\n\tfor <419@419scam.org>; Sun, 21 Sep 2008 21:43:45 +0000 (UTC)
\nX-RZG-CLASS-ID: mo05
\nX-RZG-AUTH: :L2MKYUGrb9+s7Ys+\/C6cdNboKaxR22vZQHQdVrAeYnDdBsCFdpW1J0sdHw==
\nReceived: from [77.21.44.13] ([62.159.230.93])
\n\tby post.webmailer.de (fruni mo40) (RZmta 17.4)
\n\twith ESMTP id L03273k8LKd8yb for <419@419scam.org>;
\n\tSun, 21 Sep 2008 23:43:17 +0200 (MEST)
\n\t(envelope-from: )
\nDate: Sun, 21 Sep 2008 23:40:54 +0200
\nMime-version: 1.0
\nSubject: [PR] Kaspersky Betatester Programm
\nFrom: Matthias Franken
\nTo: <419@419scam.org>
\nMessage-Id: <9212340.EDWNJLIN@kaspersky.de>
\nOriginal-recipient: rfc822;419@419scam.org
\nContent-Type: multipart\/mixed; Boundary=\"--=BOUNDARY_9212340_SIIK_IDLO_OFNM_KSKB\"
\n<\/code><\/p>\n

At the time of writing this blog posting, Kasperksy’s online malware scanner did not yet recognize the Trojan Kaspersky.9.5.7.1.exe in archive file Kaspersky.9.5.7.1.rar.<\/p>\n

As I already stated in my posting about the fake Google Chrome installer, do not install software attached to or linked from emails you didn\u2019t request.<\/p>\n

The real Kaspersky software is highly regarded and trial versions are available on the Kasperky website.<\/p>\n","protected":false},"excerpt":{"rendered":"

Today I received a Trojan email that bears the same handwriting as the recent fake Google Chrome installer emails. Both emails are in German, offer an attached RAR file with what supposedly is an installer for a beta test version … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,14,2],"tags":[],"class_list":["post-83","post","type-post","status-publish","format-standard","hentry","category-malware","category-software","category-spam"],"_links":{"self":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts\/83","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/comments?post=83"}],"version-history":[{"count":1,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts\/83\/revisions"}],"predecessor-version":[{"id":84,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts\/83\/revisions\/84"}],"wp:attachment":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/media?parent=83"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/categories?post=83"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/tags?post=83"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}