Computer Emergency Response Team UNAM-CERT, received a notification about an email that reached to Hotmail users inbox, apparently, comes from DHL parcel service. The email is shown below:

In one previous posts on this blog, it was performed the analysis of a malware sample which goal is to get money by hijacking the user's session once the computer gets infected. It has recently been reported several ransomware cases about Federal Police to the Computer Emergency Response Team UNAM-CERT. The lock window on the computer is shown below:

Computer Emergency Response Team, UNAM-CERT, received a report about an email campaign leading to the download of a supposedly malicious executable file. The file pretended to be a legitimate postcard from the widely known gusanito.com site, so that UNAM-CERT proceeded to perform the analysis of the sample. Shown below, the body of the email:

UNAM-CERT received a report of a suspected malicious file blocking the user session on the computer where it was running.

This type of malware that hijacks information in computer equipment or infected user sessions is commonly called “ransomware”. Usually ransomware keeps blocking the infected computer until the victim pays a fee requested by the attacker. The image below shows the template that enables malware to block the victim’s session:

The Computer Emergency Response Team UNAM-CERT, received a report about a possible malicious executable file for GNU/Linux operating systems.

While it’s well known that exists a plenty of malware for Windows operating systems, users should not rule out the development of malware for GNU/Linux and Mac OS operating systems, which, even thought in lower degree, are not exempt to this type of threats.

UNAM-CERT received a report about an executable file that appears to be malicious. Binary was hosted in a MX domain with the following name “BC-62016.exe”

UNAM-CERT received a notification about a suspicious web site that leads to the installation of new Java software.

The UNAM-CERT received a notification which reported on a possible identity theft campaign. The threat arrives by email as a warning of possible fraud in telcel payment.

As you can see the fraudulent site is similar to legitimate bank site, however include in the address bar is not for the original site.

The Computer Emergency Response Team UNAM-CERT received a report which notified a suspicious email campaign from tarjetasbubba.com service. A link contained in the text body led to the malware piece.