It is a package included in a phishing email attack – it is in the wild, now. Brad on the SANS Internet Storm Diary has described the chain of events for an infection, which includes screenshots of what the email and package looks like.
“aa” distribution Qakbot (Qbot) infection with DarkVNC traffic – SANS Internet Storm Centre
If you do not go for a look, then at least take a minute to think about your technical and people defences for social engineering and email phishing attacks and make sure they are up to the job.
Clive Catton MSc (Cyber Security) – by-line and other articles
