419 scam with a Java Adwind payload

For a change we have a slightly unusual hybrid mish-mash, combination of a 419 scam and a Java Adwind malware delivery. It is common to see Java Adwind delivered by fake financial emails or by fake parcel delivery notices. To my recollection this is the first time that a working 419 scam and a malware delivery have been knowingly combined. I don’t know whether this was intended to be a malware delivery method or whether the sending server is infected and adding the malware to all emails sent from that account. I don’t normally post much about Java Adwind / Java Continue reading →

Source