[Warning] Malicious e-mail disguised as Truvada used for the treatment of HIV.

1. Introduction

INCA Internet response team detected malicious e-mail disguised as sent by WHO(World Health Organization). This e-mail contains malicious file. This e-mail can be shown as information of Truvada's PDF file, one of treatments of HIV, during the pregnancy. Human immunodeficiency virus (HIV) is a lentivirus (a member of the retrovirus family) that causes acquired immunodeficiency syndrome (AIDS), a condition in humans in which progressive failure of the immune system allows life-threatening opportunistic infections and cancers to thrive.

2. Spreading cases

[Warning] Malicious e-mails disguised as e-bill are spreading

Malicious e-mail used its sender's mail address for WHOupdates@doctor.com, which induces user to see information, and its file name and title are disguising as Truvada's.

E-mail title : effects of HIV prevention pills(TRUVADA) in pregnancy
Attachment : truvada pills in pregnancy.scr

"truvada pills in pregnancy.scr" has its extension as SCR(Screen Saver) though, it is executable file. Its icon is shown as PDF which can make user confused unless extension hiding option.

Upon executing, it will create certain folder below "Application Data" and certain malicious file.

Created file is Zeus Bot malicious file and tries to target online banking user.

3. Summary

Spreading malicious file with e-mail is very traditional. But a lot of users are still trying to open its attachment and being infected. To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.

INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.


  1. Take a look at this article, my friends, this info might prove itself useful for you.

  2. what are the traditional ways to avoid such a result? I'm writing an Application Data paper for the IT project class and need help college essay instantly. There's only one month left till the open discussion.

  3. I stumbled upon this blog with a host of new possibilities to explore. Thank you for the friendly in sharing. TutuApp APK

  4. Thanks for the blog.Thanks Again. Awesome tutuapp

  5. Very Interesting and wonderful information keep sharing this post kindly check
    Windows Collaboration

  6. great post. Thanks for sharing this information. Tutuapp APK
    Google duo apk

  7. I Like Your Post Thanks For Share!

  8. شركة فحص تسربات المياه بالرياض  http://tiny.cc/5sci5y بالفعل قد أصبحت واحدة من أفضل الشركات وأكثرهم تخصصاً فيما يتعلق بمجال الفحص عن التسربات المائية دون اللجوء إلى التكسير

    المصدر: شركة فحص تسربات المياه بالرياض

  9. TutuApp APK iOS Free Download Latest Version 2019 Best Version Free! here And Also more...
    TutuApp Download
    Snaptube PC

  10. There is no doubt in the app you can easily download the app the most exciting features are waiting for you can easily go with,
    so Download TutuApp APK Official App For Android, iOS devices, iPad, iPhone Tutu App.
    There are nothing extra features required in this app because the most important items are already available in his update versions.
    Also, Get TweakBox App.

  11. I love to read books on the internet, and this is one of the best books which is very informative for all of us. I will must buy this book and read it. Get Mobile App Development Dubai services related to mobile app development.

  12. To get a Non Plagiarized Essays you need, all you have to do is contact our Affordable Term Papers team and let us discuss everything concerning your Legitimate Essay Writing Services.

  13. Do you have an insight into the qualities took out for in a company offering excellent Article Review Papers Services? Asking for Article Review Writing Service is noble because it enhances your Review Article Writing Service performance.

  14. Way cool! Some very valid points! I appreciate you penning this article and also the rest of the site is really good.
    ERR_EMPTY_RESPONSE or No Data Received

  15. I am absolutely taking pleasure in your publish and anticipate new posts. You shared such a informative things. bed sheet sets

  16. I feel about it and love learning more on this topic. If possible, as you gain expertise, would you mind updating your blog with more information? It is extremely helpful for me. buy gmail accounts


  17. نقل عفش من الدمام الى الرياض نقل عفش من الدمام الى الرياض
    ارخص نقل عفش بمكة ارخص نقل عفش بمكة
    نقل عفش من جدة الى الاردن نقل عفش من جدة الى الاردن
    نقل عفش

  18. I read this article! I hope you will continue to have such articles to share with everyone! thank you! hotmail login

  19. Human immunodeficiency virus (HIV) is a lentivirus (a member of the retrovirus family) that causes acquired immunodeficiency syndrome (AIDS), a condition in humans in which progressive failure of the immune system for watch movie online allows life-threatening opportunistic infections and cancers to thrive.

  20. I really like your article, keep sharing this type of content, buy online best waterproof wireless speaker

  21. Are you finding islamic products which provides cash on delivery, Click here to find abaya online pakistan and enjoy the deals

  22. 180 square inches allowed us to put four big pancakes, three pieces of bacon and two eggs on the baking tray without any problem