Fwd: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you
Spam. Probable phish. Using dropbox. Is this a novel approach? I haven't seen it before ... -- Max Trefonides MCS Systems [email protected] Begin forwarded message:
From: David via Dropbox <[email protected]> Subject: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you Date: July 10, 2013 10:32:21 AM CDT To: [email protected] Reply-To: [email protected]
David's message:
"Please take a look at this new data visualization tool from Quantum4D. You may find it of interest. No more spreadsheets/number tables :) Contact me for more information. David Steinman [email protected] http://www.quantum4d.com/"
Click here to view: https://www.dropbox.com/l/2Ia6JDwBimOJ4hNn4xF4Yc
(David shared this file using Dropbox. Enjoy!)
While certainly spam, I don't think it's a phish. -- Craig On Jul 10, 2013, at 10:40 AM, Max Trefonides <[email protected]> wrote:
Spam. Probable phish. Using dropbox. Is this a novel approach? I haven't seen it before ...
-- Max Trefonides MCS Systems [email protected]
Begin forwarded message:
From: David via Dropbox <[email protected]> Subject: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you Date: July 10, 2013 10:32:21 AM CDT To: [email protected] Reply-To: [email protected]
David's message:
"Please take a look at this new data visualization tool from Quantum4D. You may find it of interest. No more spreadsheets/number tables :) Contact me for more information. David Steinman [email protected] http://www.quantum4d.com/"
Click here to view: https://www.dropbox.com/l/2Ia6JDwBimOJ4hNn4xF4Yc
(David shared this file using Dropbox. Enjoy!)
Also, given dropbox bandwidth caps, that's a pretty ineffective way to spam. -- Craig On Jul 10, 2013, at 10:47 AM, Craig Stacey <[email protected]> wrote:
While certainly spam, I don't think it's a phish. -- Craig
On Jul 10, 2013, at 10:40 AM, Max Trefonides <[email protected]> wrote:
Spam. Probable phish. Using dropbox. Is this a novel approach? I haven't seen it before ...
-- Max Trefonides MCS Systems [email protected]
Begin forwarded message:
From: David via Dropbox <[email protected]> Subject: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you Date: July 10, 2013 10:32:21 AM CDT To: [email protected] Reply-To: [email protected]
David's message:
"Please take a look at this new data visualization tool from Quantum4D. You may find it of interest. No more spreadsheets/number tables :) Contact me for more information. David Steinman [email protected] http://www.quantum4d.com/"
Click here to view: https://www.dropbox.com/l/2Ia6JDwBimOJ4hNn4xF4Yc
(David shared this file using Dropbox. Enjoy!)
Max, When we are under a very directed and large phish that is why we sometimes block drop box.... Check out the google intel below....Dropbox is full of malware. If I was a bad guy I definitely would use it...2GB of free storage to hold my badness. In the "old" days I had to pop web servers to store my malware, now I just sign up for my free gmail to get my free dropbox to target my enemies and have them install my fresh malware (of course targeted to stay below the download caps and make sure my malware was "small")! YAY! http://www.google.com/safebrowsing/diagnostic?site=dropbox.com I ran the PPT in our malware checker...and it came back clean...not to mean it's 100% safe, but at least the anomaly engine didn't find anything. If not expecting...probably safer to ignore/delete. -Matt Cyber -----Original Message----- From: Max Trefonides [mailto:[email protected]] Sent: Wednesday, July 10, 2013 10:41 AM To: ANL Cyber Security Cc: Core Admins Subject: Fwd: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you Spam. Probable phish. Using dropbox. Is this a novel approach? I haven't seen it before ... -- Max Trefonides MCS Systems [email protected] Begin forwarded message:
From: David via Dropbox <[email protected]> Subject: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you Date: July 10, 2013 10:32:21 AM CDT To: [email protected] Reply-To: [email protected]
David's message:
"Please take a look at this new data visualization tool from Quantum4D. You may find it of interest. No more spreadsheets/number tables :) Contact me for more information. David Steinman [email protected] http://www.quantum4d.com/"
Click here to view: https://www.dropbox.com/l/2Ia6JDwBimOJ4hNn4xF4Yc
(David shared this file using Dropbox. Enjoy!)
Thanks Matt, Thanks for running the scan on it, I was more intrigued by the idea that someone could use dropbox for a phish then I was worried that I was being targeted. I know it's spam, still better safe than sorry. Keep calm and carry on! Loose nets sink ships .. or something ... ;) -- Max Trefonides MCS Systems [email protected] On Jul 10, 2013, at 10:52 AM, "Kwiatkowski, Matthew A." <[email protected]> wrote:
Max,
When we are under a very directed and large phish that is why we sometimes block drop box....
Check out the google intel below....Dropbox is full of malware. If I was a bad guy I definitely would use it...2GB of free storage to hold my badness. In the "old" days I had to pop web servers to store my malware, now I just sign up for my free gmail to get my free dropbox to target my enemies and have them install my fresh malware (of course targeted to stay below the download caps and make sure my malware was "small")!
YAY!
http://www.google.com/safebrowsing/diagnostic?site=dropbox.com
I ran the PPT in our malware checker...and it came back clean...not to mean it's 100% safe, but at least the anomaly engine didn't find anything. If not expecting...probably safer to ignore/delete.
-Matt Cyber
-----Original Message----- From: Max Trefonides [mailto:[email protected]] Sent: Wednesday, July 10, 2013 10:41 AM To: ANL Cyber Security Cc: Core Admins Subject: Fwd: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you
Spam. Probable phish. Using dropbox. Is this a novel approach? I haven't seen it before ...
-- Max Trefonides MCS Systems [email protected]
Begin forwarded message:
From: David via Dropbox <[email protected]> Subject: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" with you Date: July 10, 2013 10:32:21 AM CDT To: [email protected] Reply-To: [email protected]
David's message:
"Please take a look at this new data visualization tool from Quantum4D. You may find it of interest. No more spreadsheets/number tables :) Contact me for more information. David Steinman [email protected] http://www.quantum4d.com/"
Click here to view: https://www.dropbox.com/l/2Ia6JDwBimOJ4hNn4xF4Yc
(David shared this file using Dropbox. Enjoy!)
I've seen some sales critter mail doing this in the past as well. Not with dropbox, but other file share services. It doesn't look malicious. Max Trefonides made the following keystrokes:
Spam. Probable phish. Using dropbox. Is this a novel approach? I haven't seen it before ...
-- Max Trefonides MCS Systems [email protected]
Begin forwarded message:
From: David via Dropbox <[email protected]> Subject: David Steinman shared "Quantum4D Overview - 2012-11-13.pptx" = with you Date: July 10, 2013 10:32:21 AM CDT To: [email protected] Reply-To: [email protected] =20 David's message: =20 "Please take a look at this new data visualization tool from = Quantum4D. You may find it of interest. No more spreadsheets/number tables :) Contact me for more information. David Steinman [email protected] http://www.quantum4d.com/" =20 Click here to view: https://www.dropbox.com/l/2Ia6JDwBimOJ4hNn4xF4Yc =20 (David shared this file using Dropbox. Enjoy!)
participants (4)
-
Craig Stacey -
Kwiatkowski, Matthew A. -
Max Trefonides -
rackow＠anl.gov