Spearphising attempt on Central Bank of Armenia employees
released on 2015-08-21 @ 07:03:26 PM
Bluecoat: As a part of the daily work process, I keep an eye on the latest incoming samples to ensure detection in our Malware Appliance. During this process, an interesting decoy caught my attention.
Sample name - Բանկերի և բանկային գործունեության մասին ՀՀ օրենք 27.07.2015.doc. Using google translate, I found that the language is Armenian and translates to "The Law on Banks and Banking 27.07.2015.doc" VirusTotal intelligence spotted the decoy in the wild as an email attachment with the subject name "Law changes" which gave me a suspicion that the attempt was made to specifically target the employees of Central bank of Armenia.