Skip to content
NewA calmer, faster ZeroHour

A gift from ZeuS for passengers of US Airways

Kaspersky Securelistby @Securelist ()6 min read2 · 1 read
Analyze CVE-2011-3544 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2011-3544
Remote Code Execution in Oracle Java SE JRE Applet Rhino Script Engine
—97%KEV—
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
ipv4109.86.20.192ed in the 48 analyzed samples, just 157 of them are unique: 109.86.20.192:25071 111.252.183.142:22376 114.149.70.68:11807 114.41.42.8
ipv4111.252.183.142d samples, just 157 of them are unique: 109.86.20.192:25071 111.252.183.142:22376 114.149.70.68:11807 114.41.42.83:23061 114.47.174.132
ipv4114.149.70.68them are unique: 109.86.20.192:25071 111.252.183.142:22376 114.149.70.68:11807 114.41.42.83:23061 114.47.174.132:25602 116.68.106.24
ipv4114.41.42.839.86.20.192:25071 111.252.183.142:22376 114.149.70.68:11807 114.41.42.83:23061 114.47.174.132:25602 116.68.106.249:17051 116.74.63.2
ipv4114.47.174.13211.252.183.142:22376 114.149.70.68:11807 114.41.42.83:23061 114.47.174.132:25602 116.68.106.249:17051 116.74.63.215:28397 117.197.130.
ipv4116.68.106.249114.149.70.68:11807 114.41.42.83:23061 114.47.174.132:25602 116.68.106.249:17051 116.74.63.215:28397 117.197.130.195:17253 117.200.28.
ipv4116.74.63.21514.41.42.83:23061 114.47.174.132:25602 116.68.106.249:17051 116.74.63.215:28397 117.197.130.195:17253 117.200.28.128:26895 121.96.154
ipv4117.197.130.1954.47.174.132:25602 116.68.106.249:17051 116.74.63.215:28397 117.197.130.195:17253 117.200.28.128:26895 121.96.154.99:18978 122.120.6.12
ipv4117.200.28.128.68.106.249:17051 116.74.63.215:28397 117.197.130.195:17253 117.200.28.128:26895 121.96.154.99:18978 122.120.6.124:22322 122.26.48.225
ipv4121.96.154.99.74.63.215:28397 117.197.130.195:17253 117.200.28.128:26895 121.96.154.99:18978 122.120.6.124:22322 122.26.48.225:25178 123.231.81.17
ipv4122.120.6.124.197.130.195:17253 117.200.28.128:26895 121.96.154.99:18978 122.120.6.124:22322 122.26.48.225:25178 123.231.81.178:20129 124.13.56.10
ipv4122.26.48.22517.200.28.128:26895 121.96.154.99:18978 122.120.6.124:22322 122.26.48.225:25178 123.231.81.178:20129 124.13.56.101:15582 125.25.55.15
ipv4123.231.81.178121.96.154.99:18978 122.120.6.124:22322 122.26.48.225:25178 123.231.81.178:20129 124.13.56.101:15582 125.25.55.156:20834 140.130.36.32
ipv4124.13.56.10122.120.6.124:22322 122.26.48.225:25178 123.231.81.178:20129 124.13.56.101:15582 125.25.55.156:20834 140.130.36.32:13590 143.90.182.68
ipv4125.25.55.15622.26.48.225:25178 123.231.81.178:20129 124.13.56.101:15582 125.25.55.156:20834 140.130.36.32:13590 143.90.182.68:15121 151.40.222.25
ipv4140.130.36.3223.231.81.178:20129 124.13.56.101:15582 125.25.55.156:20834 140.130.36.32:13590 143.90.182.68:15121 151.40.222.25:19197 161.24.7.83:2
ipv4143.90.182.68124.13.56.101:15582 125.25.55.156:20834 140.130.36.32:13590 143.90.182.68:15121 151.40.222.25:19197 161.24.7.83:28740 165.228.237.204
ipv4151.40.222.25125.25.55.156:20834 140.130.36.32:13590 143.90.182.68:15121 151.40.222.25:19197 161.24.7.83:28740 165.228.237.204:17223 173.11.33.57:
ipv4161.24.7.83140.130.36.32:13590 143.90.182.68:15121 151.40.222.25:19197 161.24.7.83:28740 165.228.237.204:17223 173.11.33.57:28198 175.141.221.
ipv4165.228.237.2040 143.90.182.68:15121 151.40.222.25:19197 161.24.7.83:28740 165.228.237.204:17223 173.11.33.57:28198 175.141.221.126:24400 177.17.3.94:
ipv4173.11.33.57151.40.222.25:19197 161.24.7.83:28740 165.228.237.204:17223 173.11.33.57:28198 175.141.221.126:24400 177.17.3.94:14470 177.41.72.204
ipv4175.141.221.126161.24.7.83:28740 165.228.237.204:17223 173.11.33.57:28198 175.141.221.126:24400 177.17.3.94:14470 177.41.72.204:19922 177.42.233.93:1
ipv4176.28.18.135hen the downloader runs, it connects to its C&C at the URL “176.28.18.135/pony/gate.php”, and downloads and runs another malicious pr
ipv4177.17.3.94.228.237.204:17223 173.11.33.57:28198 175.141.221.126:24400 177.17.3.94:14470 177.41.72.204:19922 177.42.233.93:13577 177.42.26.217
ipv4177.41.72.204173.11.33.57:28198 175.141.221.126:24400 177.17.3.94:14470 177.41.72.204:19922 177.42.233.93:13577 177.42.26.217:14084 178.121.5.147
ipv4177.42.233.93175.141.221.126:24400 177.17.3.94:14470 177.41.72.204:19922 177.42.233.93:13577 177.42.26.217:14084 178.121.5.147:22245 178.156.170.2
ipv4177.42.26.2170 177.17.3.94:14470 177.41.72.204:19922 177.42.233.93:13577 177.42.26.217:14084 178.121.5.147:22245 178.156.170.215:14697 180.234.242
ipv4178.121.5.147177.41.72.204:19922 177.42.233.93:13577 177.42.26.217:14084 178.121.5.147:22245 178.156.170.215:14697 180.234.242.6:12692 186.122.42.
ipv4178.156.170.215177.42.233.93:13577 177.42.26.217:14084 178.121.5.147:22245 178.156.170.215:14697 180.234.242.6:12692 186.122.42.176:21468 186.146.109.
ipv4180.234.242.67.42.26.217:14084 178.121.5.147:22245 178.156.170.215:14697 180.234.242.6:12692 186.122.42.176:21468 186.146.109.235:28038 186.169.20
ipv4186.122.42.1768.121.5.147:22245 178.156.170.215:14697 180.234.242.6:12692 186.122.42.176:21468 186.146.109.235:28038 186.169.207.31:25267 186.206.85
ipv4186.146.109.235.156.170.215:14697 180.234.242.6:12692 186.122.42.176:21468 186.146.109.235:28038 186.169.207.31:25267 186.206.85.241:29592 186.212.252
ipv4186.169.207.31.234.242.6:12692 186.122.42.176:21468 186.146.109.235:28038 186.169.207.31:25267 186.206.85.241:29592 186.212.252.139:26376 186.61.97.
ipv4186.206.85.241122.42.176:21468 186.146.109.235:28038 186.169.207.31:25267 186.206.85.241:29592 186.212.252.139:26376 186.61.97.233:18271 187.21.121.
ipv4186.212.252.139146.109.235:28038 186.169.207.31:25267 186.206.85.241:29592 186.212.252.139:26376 186.61.97.233:18271 187.21.121.179:29597 187.52.165.2
ipv4186.61.97.233169.207.31:25267 186.206.85.241:29592 186.212.252.139:26376 186.61.97.233:18271 187.21.121.179:29597 187.52.165.241:25003 187.59.156.
ipv4187.21.121.179.206.85.241:29592 186.212.252.139:26376 186.61.97.233:18271 187.21.121.179:29597 187.52.165.241:25003 187.59.156.215:23810 187.78.48.9
ipv4187.52.165.241.212.252.139:26376 186.61.97.233:18271 187.21.121.179:29597 187.52.165.241:25003 187.59.156.215:23810 187.78.48.90:28054 188.24.177.17
ipv4187.59.156.2156.61.97.233:18271 187.21.121.179:29597 187.52.165.241:25003 187.59.156.215:23810 187.78.48.90:28054 188.24.177.174:20670 188.24.183.30
ipv4187.78.48.90.21.121.179:29597 187.52.165.241:25003 187.59.156.215:23810 187.78.48.90:28054 188.24.177.174:20670 188.24.183.30:20670 188.24.42.24
ipv4188.24.177.17487.52.165.241:25003 187.59.156.215:23810 187.78.48.90:28054 188.24.177.174:20670 188.24.183.30:20670 188.24.42.247:29919 188.24.91.76:
ipv4188.24.183.3087.59.156.215:23810 187.78.48.90:28054 188.24.177.174:20670 188.24.183.30:20670 188.24.42.247:29919 188.24.91.76:18603 188.24.94.127:
ipv4188.24.42.247187.78.48.90:28054 188.24.177.174:20670 188.24.183.30:20670 188.24.42.247:29919 188.24.91.76:18603 188.24.94.127:18603 188.25.32.93:1
ipv4188.24.91.7688.24.177.174:20670 188.24.183.30:20670 188.24.42.247:29919 188.24.91.76:18603 188.24.94.127:18603 188.25.32.93:18509 188.26.246.185
ipv4188.24.94.127188.24.183.30:20670 188.24.42.247:29919 188.24.91.76:18603 188.24.94.127:18603 188.25.32.93:18509 188.26.246.185:21181 188.27.192.14
ipv4188.25.32.93188.24.42.247:29919 188.24.91.76:18603 188.24.94.127:18603 188.25.32.93:18509 188.26.246.185:21181 188.27.192.140:10991 188.27.77.6
ipv4188.26.246.1859 188.24.91.76:18603 188.24.94.127:18603 188.25.32.93:18509 188.26.246.185:21181 188.27.192.140:10991 188.27.77.6:14351 189.103.58.227
ipv4188.27.192.140188.24.94.127:18603 188.25.32.93:18509 188.26.246.185:21181 188.27.192.140:10991 188.27.77.6:14351 189.103.58.227:15863 189.106.203.3:
ipv4188.27.77.688.25.32.93:18509 188.26.246.185:21181 188.27.192.140:10991 188.27.77.6:14351 189.103.58.227:15863 189.106.203.3:22619 189.113.210.
ipv4189.103.58.227188.26.246.185:21181 188.27.192.140:10991 188.27.77.6:14351 189.103.58.227:15863 189.106.203.3:22619 189.113.210.69:16075 189.58.63.42
ipv4189.106.203.3188.27.192.140:10991 188.27.77.6:14351 189.103.58.227:15863 189.106.203.3:22619 189.113.210.69:16075 189.58.63.42:23810 190.11.42.132
ipv4189.113.210.69188.27.77.6:14351 189.103.58.227:15863 189.106.203.3:22619 189.113.210.69:16075 189.58.63.42:23810 190.11.42.132:16838 190.183.196.38
ipv4189.58.63.429.103.58.227:15863 189.106.203.3:22619 189.113.210.69:16075 189.58.63.42:23810 190.11.42.132:16838 190.183.196.38:27445 190.200.120.
ipv4190.11.42.132189.106.203.3:22619 189.113.210.69:16075 189.58.63.42:23810 190.11.42.132:16838 190.183.196.38:27445 190.200.120.150:17663 190.201.27
ipv4190.183.196.38189.113.210.69:16075 189.58.63.42:23810 190.11.42.132:16838 190.183.196.38:27445 190.200.120.150:17663 190.201.27.240:12618 190.231.25
ipv4190.200.120.150189.58.63.42:23810 190.11.42.132:16838 190.183.196.38:27445 190.200.120.150:17663 190.201.27.240:12618 190.231.254.101:11271 190.26.120
ipv4190.201.27.240.11.42.132:16838 190.183.196.38:27445 190.200.120.150:17663 190.201.27.240:12618 190.231.254.101:11271 190.26.120.90:22952 2.40.249.44
ipv4190.231.254.101183.196.38:27445 190.200.120.150:17663 190.201.27.240:12618 190.231.254.101:11271 190.26.120.90:22952 2.40.249.44:23266 200.109.42.212:
ipv4190.26.120.9000.120.150:17663 190.201.27.240:12618 190.231.254.101:11271 190.26.120.90:22952 2.40.249.44:23266 200.109.42.212:25890 200.126.164.12
ipv4200.109.42.212190.231.254.101:11271 190.26.120.90:22952 2.40.249.44:23266 200.109.42.212:25890 200.126.164.122:25565 200.84.130.185:29346 201.145.18
ipv4200.126.164.122190.26.120.90:22952 2.40.249.44:23266 200.109.42.212:25890 200.126.164.122:25565 200.84.130.185:29346 201.145.184.97:25585 201.173.212
ipv4200.84.130.185.40.249.44:23266 200.109.42.212:25890 200.126.164.122:25565 200.84.130.185:29346 201.145.184.97:25585 201.173.212.122:25493 201.21.14.
ipv4201.145.184.97109.42.212:25890 200.126.164.122:25565 200.84.130.185:29346 201.145.184.97:25585 201.173.212.122:25493 201.21.14.224:19004 201.58.108.
ipv4201.173.212.122126.164.122:25565 200.84.130.185:29346 201.145.184.97:25585 201.173.212.122:25493 201.21.14.224:19004 201.58.108.117:19986 201.58.79.25
ipv4201.21.14.22484.130.185:29346 201.145.184.97:25585 201.173.212.122:25493 201.21.14.224:19004 201.58.108.117:19986 201.58.79.254:19986 202.149.67.1
ipv4201.58.108.117.145.184.97:25585 201.173.212.122:25493 201.21.14.224:19004 201.58.108.117:19986 201.58.79.254:19986 202.149.67.164:26124 206.219.64.1
ipv4201.58.79.254.173.212.122:25493 201.21.14.224:19004 201.58.108.117:19986 201.58.79.254:19986 202.149.67.164:26124 206.219.64.130:21401 208.180.223
ipv4202.149.67.16401.21.14.224:19004 201.58.108.117:19986 201.58.79.254:19986 202.149.67.164:26124 206.219.64.130:21401 208.180.223.27:12046 213.163.112
ipv4206.219.64.1301.58.108.117:19986 201.58.79.254:19986 202.149.67.164:26124 206.219.64.130:21401 208.180.223.27:12046 213.163.112.183:22254 213.164.22
ipv4208.180.223.271.58.79.254:19986 202.149.67.164:26124 206.219.64.130:21401 208.180.223.27:12046 213.163.112.183:22254 213.164.225.186:25619 216.187.1
ipv4213.163.112.183.149.67.164:26124 206.219.64.130:21401 208.180.223.27:12046 213.163.112.183:22254 213.164.225.186:25619 216.187.184.34:28333 218.170.36
ipv4213.164.225.186219.64.130:21401 208.180.223.27:12046 213.163.112.183:22254 213.164.225.186:25619 216.187.184.34:28333 218.170.36.242:13286 218.170.42.
ipv4216.187.184.3480.223.27:12046 213.163.112.183:22254 213.164.225.186:25619 216.187.184.34:28333 218.170.36.242:13286 218.170.42.95:13286 221.133.18.1
ipv4218.170.36.24263.112.183:22254 213.164.225.186:25619 216.187.184.34:28333 218.170.36.242:13286 218.170.42.95:13286 221.133.18.131:12492 222.124.55.1
ipv4218.170.42.95164.225.186:25619 216.187.184.34:28333 218.170.36.242:13286 218.170.42.95:13286 221.133.18.131:12492 222.124.55.128:29563 24.154.22.5
ipv4221.133.18.1316.187.184.34:28333 218.170.36.242:13286 218.170.42.95:13286 221.133.18.131:12492 222.124.55.128:29563 24.154.22.50:13524 27.119.46.174
ipv4222.124.55.1288.170.36.242:13286 218.170.42.95:13286 221.133.18.131:12492 222.124.55.128:29563 24.154.22.50:13524 27.119.46.174:22985 27.4.113.69:27
ipv42.40.249.44.201.27.240:12618 190.231.254.101:11271 190.26.120.90:22952 2.40.249.44:23266 200.109.42.212:25890 200.126.164.122:25565 200.84.130
ipv424.154.22.508.170.42.95:13286 221.133.18.131:12492 222.124.55.128:29563 24.154.22.50:13524 27.119.46.174:22985 27.4.113.69:27664 41.102.165.37:2
ipv427.119.46.17421.133.18.131:12492 222.124.55.128:29563 24.154.22.50:13524 27.119.46.174:22985 27.4.113.69:27664 41.102.165.37:29870 41.252.115.102:
ipv427.4.113.69222.124.55.128:29563 24.154.22.50:13524 27.119.46.174:22985 27.4.113.69:27664 41.102.165.37:29870 41.252.115.102:25734 46.197.66.43
ipv441.102.165.3763 24.154.22.50:13524 27.119.46.174:22985 27.4.113.69:27664 41.102.165.37:29870 41.252.115.102:25734 46.197.66.43:29879 49.128.175.94
ipv441.252.115.1024 27.119.46.174:22985 27.4.113.69:27664 41.102.165.37:29870 41.252.115.102:25734 46.197.66.43:29879 49.128.175.94:24566 50.129.124.49:
ipv446.197.66.4327.4.113.69:27664 41.102.165.37:29870 41.252.115.102:25734 46.197.66.43:29879 49.128.175.94:24566 50.129.124.49:28454 60.246.131.17
ipv449.128.175.9441.102.165.37:29870 41.252.115.102:25734 46.197.66.43:29879 49.128.175.94:24566 50.129.124.49:28454 60.246.131.173:23424 61.78.79.8:1
ipv450.129.124.4941.252.115.102:25734 46.197.66.43:29879 49.128.175.94:24566 50.129.124.49:28454 60.246.131.173:23424 61.78.79.8:16362 66.193.204.141:
ipv460.246.131.17346.197.66.43:29879 49.128.175.94:24566 50.129.124.49:28454 60.246.131.173:23424 61.78.79.8:16362 66.193.204.141:26171 68.127.16.166:2
ipv461.78.79.89.128.175.94:24566 50.129.124.49:28454 60.246.131.173:23424 61.78.79.8:16362 66.193.204.141:26171 68.127.16.166:22762 68.150.204.2
ipv466.193.204.1416 50.129.124.49:28454 60.246.131.173:23424 61.78.79.8:16362 66.193.204.141:26171 68.127.16.166:22762 68.150.204.237:16150 71.11.205.72
ipv468.127.16.16660.246.131.173:23424 61.78.79.8:16362 66.193.204.141:26171 68.127.16.166:22762 68.150.204.237:16150 71.11.205.72:23114 72.185.157.25
ipv468.150.204.2374 61.78.79.8:16362 66.193.204.141:26171 68.127.16.166:22762 68.150.204.237:16150 71.11.205.72:23114 72.185.157.254:29727 72.199.188.13
ipv471.11.205.72.193.204.141:26171 68.127.16.166:22762 68.150.204.237:16150 71.11.205.72:23114 72.185.157.254:29727 72.199.188.132:25142 72.64.43.86
md50299f2de435f6406ef8c5e51826d3e42a5e34a9be4989b3088eeec41ca 5e097d18a41035e73003d9e47adc232f 0299f2de435f6406ef8c5e51826d3e42 0b1165cfa99ae9383439e0c1a7e070fb 0f7664e04d4d62c4b4ad09b085
md502fbfc95c2f99490f9382ec704c1f1e5138768647e Downloader ZeuS 0f7dc4fac417f2e5145d210ee5bc2129 02fbfc95c2f99490f9382ec704c1f1e5 102e6b401079b1be09bb47da9ee84bfe 081943d546a7364bfd7f3ae136
md5081943d546a7364bfd7f3ae1360aa65795c2f99490f9382ec704c1f1e5 102e6b401079b1be09bb47da9ee84bfe 081943d546a7364bfd7f3ae1360aa657 11b66c03801353c25c4bab7abd5f8588 1b83702cd12e4f8d48771ca1cb
md50b1165cfa99ae9383439e0c1a7e070fb18a41035e73003d9e47adc232f 0299f2de435f6406ef8c5e51826d3e42 0b1165cfa99ae9383439e0c1a7e070fb 0f7664e04d4d62c4b4ad09b085109008 11a97068338efd774f744a9c4c
md50b95280b2ad4dff0daaf65d801df753503801353c25c4bab7abd5f8588 1b83702cd12e4f8d48771ca1cbcaf034 0b95280b2ad4dff0daaf65d801df7535 2775cf95d5450bdb54cf537f35e8e504 0c720f41ecbcacf563630e0ac8
md50c341dab17d221b19d707254097bd9c0dbc749510fe530269d707fdb34 2D13BCEF58B8E29C52AF1D29F2E81544 0c341dab17d221b19d707254097bd9c0 fb77c4c32297c460a786cb138768647e Downloader ZeuS 0f7dc4fac4
md50c720f41ecbcacf563630e0ac87391360b2ad4dff0daaf65d801df7535 2775cf95d5450bdb54cf537f35e8e504 0c720f41ecbcacf563630e0ac8739136 42de75c29dc058f14dab5fe94130a907 0c952e99a5014a2fd30c1c613f
md50c952e99a5014a2fd30c1c613ffb967141ecbcacf563630e0ac8739136 42de75c29dc058f14dab5fe94130a907 0c952e99a5014a2fd30c1c613ffb9671 432788a5e34a9be4989b3088eeec41ca 5e097d18a41035e73003d9e47a
md50f7664e04d4d62c4b4ad09b085109008de435f6406ef8c5e51826d3e42 0b1165cfa99ae9383439e0c1a7e070fb 0f7664e04d4d62c4b4ad09b085109008 11a97068338efd774f744a9c4cd9afe7 46737ca337d178894532d570ad
md50f7dc4fac417f2e5145d210ee5bc212954097bd9c0 fb77c4c32297c460a786cb138768647e Downloader ZeuS 0f7dc4fac417f2e5145d210ee5bc2129 02fbfc95c2f99490f9382ec704c1f1e5 102e6b401079b1be09bb47da9e
md5102e6b401079b1be09bb47da9ee84bfefac417f2e5145d210ee5bc2129 02fbfc95c2f99490f9382ec704c1f1e5 102e6b401079b1be09bb47da9ee84bfe 081943d546a7364bfd7f3ae1360aa657 11b66c03801353c25c4bab7abd
md511a97068338efd774f744a9c4cd9afe7cfa99ae9383439e0c1a7e070fb 0f7664e04d4d62c4b4ad09b085109008 11a97068338efd774f744a9c4cd9afe7 46737ca337d178894532d570ad729089 4e44ca94f7682b7a8734025a05
md511b66c03801353c25c4bab7abd5f8588401079b1be09bb47da9ee84bfe 081943d546a7364bfd7f3ae1360aa657 11b66c03801353c25c4bab7abd5f8588 1b83702cd12e4f8d48771ca1cbcaf034 0b95280b2ad4dff0daaf65d801
md51b83702cd12e4f8d48771ca1cbcaf034d546a7364bfd7f3ae1360aa657 11b66c03801353c25c4bab7abd5f8588 1b83702cd12e4f8d48771ca1cbcaf034 0b95280b2ad4dff0daaf65d801df7535 2775cf95d5450bdb54cf537f35
md52775cf95d5450bdb54cf537f35e8e5042cd12e4f8d48771ca1cbcaf034 0b95280b2ad4dff0daaf65d801df7535 2775cf95d5450bdb54cf537f35e8e504 0c720f41ecbcacf563630e0ac8739136 42de75c29dc058f14dab5fe941
md52d13bcef58b8e29c52af1d29f2e81544a.fof Exploit.SWF.Agent.gd 892693dbc749510fe530269d707fdb34 2D13BCEF58B8E29C52AF1D29F2E81544 0c341dab17d221b19d707254097bd9c0 fb77c4c32297c460a786cb1387
md542de75c29dc058f14dab5fe94130a90795d5450bdb54cf537f35e8e504 0c720f41ecbcacf563630e0ac8739136 42de75c29dc058f14dab5fe94130a907 0c952e99a5014a2fd30c1c613ffb9671 432788a5e34a9be4989b3088ee
md5432788a5e34a9be4989b3088eeec41cac29dc058f14dab5fe94130a907 0c952e99a5014a2fd30c1c613ffb9671 432788a5e34a9be4989b3088eeec41ca 5e097d18a41035e73003d9e47adc232f 0299f2de435f6406ef8c5e5182
md546737ca337d178894532d570ad729089e04d4d62c4b4ad09b085109008 11a97068338efd774f744a9c4cd9afe7 46737ca337d178894532d570ad729089 4e44ca94f7682b7a8734025a05545a42 77e772b8d17d0ccd52be1fcbbd
md54e44ca94f7682b7a8734025a05545a4268338efd774f744a9c4cd9afe7 46737ca337d178894532d570ad729089 4e44ca94f7682b7a8734025a05545a42 77e772b8d17d0ccd52be1fcbbdd71ee4 c94e90f9adc52e72c403ff79ea
md55e097d18a41035e73003d9e47adc232f99a5014a2fd30c1c613ffb9671 432788a5e34a9be4989b3088eeec41ca 5e097d18a41035e73003d9e47adc232f 0299f2de435f6406ef8c5e51826d3e42 0b1165cfa99ae9383439e0c1a7
md573515909a2d6353714a5226577554688f9adc52e72c403ff79ea8b6cbc f6853b73db8a1e6105a0b2734974205e 73515909a2d6353714a5226577554688 ee80937bee1231f4223d98c4d4a56480
md577e772b8d17d0ccd52be1fcbbdd71ee4a337d178894532d570ad729089 4e44ca94f7682b7a8734025a05545a42 77e772b8d17d0ccd52be1fcbbdd71ee4 c94e90f9adc52e72c403ff79ea8b6cbc f6853b73db8a1e6105a0b27349
md5892693dbc749510fe530269d707fdb34.CVE-2011-3544.mz Exploit.JS.Pdfka.fof Exploit.SWF.Agent.gd 892693dbc749510fe530269d707fdb34 2D13BCEF58B8E29C52AF1D29F2E81544 0c341dab17d221b19d70725409
md5c94e90f9adc52e72c403ff79ea8b6cbc94f7682b7a8734025a05545a42 77e772b8d17d0ccd52be1fcbbdd71ee4 c94e90f9adc52e72c403ff79ea8b6cbc f6853b73db8a1e6105a0b2734974205e 73515909a2d6353714a5226577
md5ee80937bee1231f4223d98c4d4a5648073db8a1e6105a0b2734974205e 73515909a2d6353714a5226577554688 ee80937bee1231f4223d98c4d4a56480
md5f6853b73db8a1e6105a0b2734974205eb8d17d0ccd52be1fcbbdd71ee4 c94e90f9adc52e72c403ff79ea8b6cbc f6853b73db8a1e6105a0b2734974205e 73515909a2d6353714a5226577554688 ee80937bee1231f4223d98c4d4
md5fb77c4c32297c460a786cb138768647eEF58B8E29C52AF1D29F2E81544 0c341dab17d221b19d707254097bd9c0 fb77c4c32297c460a786cb138768647e Downloader ZeuS 0f7dc4fac417f2e5145d210ee5bc2129 02fbfc95c2

From the original article

6 min read at securelist.com

On 20 March, we detected a spam campaign targeting passengers of US Airways. Almost the entire week cybercriminals were sending users the following email allegedly from US Airways: There is a brief description of the check-in procedure and a confirmation code is provided for online reservation.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.