Quick Question Malware Spreading through Email

Quick Question Malware Spreading through Email


An email having the subject of “Quick Question” pretends to send a resume from a random sender is currently in the rounds. The so-called attached resume is a malicious .rtf attachment, actually a word docx file and tries to download password stealers, Trojans like Dyreza and Dridex, and ransomware like Teslacrypt and Cryptolocker into your system.

Most of these emails with the subject “Quick Question” are coming from random senders at rambler.ru. The subject and email content is such that it invites the reader to quickly open the file.

A screenshot of such kind of email is given:

Quick Question

Complete details on the malware can be found here.