Beware of Boston Marathon emails

Be aware of news items related to the Boston Marathon attack. The below email is a good example of a targetted attack using news items as a lure. It will try to lure you into opening an attachment and thereby infecting your computer. The attachment is titled The Prayer.DOC. urging recipients to pray for the victims of the tragic event.

The said attachment (MD5: 5863fb691dd5b3002c040fc7c535800f and detected as TROJ_MDROP.ATP) exploits the vulnerability in CVE-2012-0158 to drop the malicious executable file “iExplorer.exe” (MD5: 74a8269dd80d41f7c81e0323719c883c ) onto the target’s computer.