Malicious email with subject "Multibit is an innovative payment..."

[RippleAway]

Just a heads up for the community that a new malicious email is making the rounds:

From: team@Multibit.wallet.org
Return-Path: <segrroz@host.askroz.com.au>
Subject: Multibit is an innovative payment network and a new kind of money
Contents:

Multibit New Wallet Released
Multibit-Wallet

Windows Linux Mac OS X Multibit-Wallet is a full Multibit client and builds the backbone of the network. It offers the highest levels of security, privacy, and stability. However, it has fewer features and it takes a lot of space and memory.

Kind regards, The Multibit.org Team

Attachment: Multibit win2 mac lunx 1.9.jar (43.3 KB)

I've also received a version that swaps 'Multibit' with 'Bitcoin'.

[1714795288]

1714795288

[1714795288]

1714795288

[1714795288]

1714795288

[1714795288]

1714795288

[1714795288]

1714795288

[PYneer]

Really good PSA. My rule of thumb is never download an attachment unless you know exactly what it is.

[RippleAway]

And a new one:

Windows Linux Mac OS X
Multibit-Wallet is a full Multibit client and builds the backbone of the network. It offers the highest levels of security, privacy, and stability. However, it has fewer features and it takes a lot of space and memory.

Kind regards,
The Multibit.org Team

 

htt:://multibit.org/releases/multibit-0.5.16/multibit-0.5.16-WalletNew-Relased-2weeks

The actual link leads to http://www.nayarmusic.com/desktop/

Message-ID: <F8.BD.07692.C9193135@sl-mta03>
Return path: team@multibit.wallet.org
Subject: Multibit is an innovative payment network and a new kind of money 2 weeks

[RippleAway]

The attachment has now been analyzed and classified by Avira as a type of malware called Java/Adwind.F. Detection should be added to the Virus Definition File with one of the next updates.

[substratum]

The Adwind/UNRECOM RAT in question connects to khaleeel.no-ip.info (currently resolves to 82.205.115.201, a Palestinian IP).

[E.exchanger]

Thanks for sharing it will benefit everyone as a warning a didn't receive the email yet but my mantra is i never download any random attachments as they can be anything a virus or keylogger which can  possibly end up stealing my coins even if your anti virus shows the file is clean never execute any random file on your computer as the malwares can be made FUD by hexing or so called code obfuscation i guess !!!