{"id":6767,"date":"2020-10-11T23:52:58","date_gmt":"2020-10-12T03:52:58","guid":{"rendered":"http:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/?p=6767"},"modified":"2020-10-17T03:56:02","modified_gmt":"2020-10-17T07:56:02","slug":"week-7-in-the-news-phishing-emails-lure-victims-with-inside-info-on-trumps-health","status":"publish","type":"post","link":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/2020\/10\/11\/week-7-in-the-news-phishing-emails-lure-victims-with-inside-info-on-trumps-health\/","title":{"rendered":"Week 7 &#8211; In the News: Phishing emails lure victims with inside info on Trump&#8217;s health"},"content":{"rendered":"<p>A new phishing campaign has been discovered that will install a backdoor on the victim\u2019s computer.\u00a0 The phishing campaign is utilizing President Trump\u2019s recent contraction of the Corona Virus.\u00a0 With the presidential election just weeks away, people on both sides of the election have become obsessed with President Trump\u2019s health due to the Corona Virus.<\/p>\n<p>The phishing email which has been spotted by cybersescurity firm ProofPoint, is using a slew of different email subjects which include:<\/p>\n<ul>\n<li>Recent materials pertaining to the president\u2019s illness<\/li>\n<li>Newest information about the president\u2019s condition<\/li>\n<li>Newest info pertaining to President\u2019s illness<\/li>\n<\/ul>\n<p>The emails claim to have insider information on the president\u2019s health, requiring the user to download a document using an embedded link.\u00a0 Once the link is clicked, the victim is brought to a Google Doc claiming that Google has scanned the file and is safe, prompting the user to download the document.\u00a0 Instead of downloading the doc, a BazarLoader executable will be downloaded instead.<\/p>\n<p>A BazarLoader is a backdoor created by the TrickBot gang.\u00a0 This backdoor allows attackers to remotely access the computer which will be used to compromise the network.\u00a0 Generally this leads to the installation or the Ryuk ransomware.\u00a0 Ryuk is a form of ransomware that targets enterprise environments.<\/p>\n<p>&nbsp;<\/p>\n<p>https:\/\/www.bleepingcomputer.com\/news\/security\/phishing-emails-lure-victims-with-inside-info-on-trumps-health\/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A new phishing campaign has been discovered that will install a backdoor on the victim\u2019s computer.\u00a0 The phishing campaign is utilizing President Trump\u2019s recent contraction of the Corona Virus.\u00a0 With the presidential election just weeks away, people on both sides of the election have become obsessed with President Trump\u2019s health due to the Corona Virus. [&hellip;]<\/p>\n","protected":false},"author":25060,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[803560],"tags":[],"class_list":["post-6767","post","type-post","status-publish","format-standard","category-week-07-netcat-and-hellcat","entry"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts\/6767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/users\/25060"}],"replies":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/comments?post=6767"}],"version-history":[{"count":1,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts\/6767\/revisions"}],"predecessor-version":[{"id":6768,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts\/6767\/revisions\/6768"}],"wp:attachment":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/media?parent=6767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/categories?post=6767"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/tags?post=6767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}