Angelina Jolie malware

Today, our HoneyPot captured a new Trojan named after movie star Angelina Jolie (file name: nude-anjelina.avi.exe). This is a massive spam campaign using different domain names but the same IP address.

Interestingly enough, the domains are registered to a Chinese company although the IP is located in Germany. 

 Fake suspended account still delivers malware:

Check out the registrar and the IP location:

 Fairly new to AV vendors… unknown to most:

JSegura