[cisco-voip] Cryptolocker Unity Voice Mail Notification

[Brian Meade (brmeade)]

Hey all,

We've been getting some reports of users that have claimed to have gotten a Cryptolocker virus email that was crafted to look like a Unity Voice Mail notification email.  The attachments are supposedly even made to have the little WAV icon although the actual attachment is a ZIP containing the Cryptolocker virus.

Please be on the lookout for this in your environments.  I've alerted our security team (PSIRT) about the issue as well.

If you see one of these in the wild, please send me a screenshot so I can give it PSIRT.

Has anyone seen one of these already?  I've also seen one crafted to look like it came from an Avaya IP Office Voicemail system so be on the lookout for those as well.

Thanks,
Brian Meade
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20131223/ef735282/attachment.html>