I have no idea at this time what malware is being delivered with this campaign. However it is abusing Microsoft, Google and Amazon AWS services. When I first saw the email, I thought it was likely to be a phishing email, so was quite surprised when the link delivered a zip file. The email is all in Portuguese. It pretends to come from your own email address but is coming from www-data@zwzcvmz17pmr3k3.d2pou50uofcu5f3q45lfq2s31h.ex.internal.cloudapp.net Email looks like Facebook Inc. Caro Usuário, Alguém denunciou uma foto em seu álbum do Facebook recentemente. Dados da imagem denunciada: IMG-20161224-WA0023.jpg – Data: 25/10/2018 ás 08:00 Uma imagem … Continue reading →