Home

Malicious ZIP archives found in the AKP leak on the Wikileaks site

My full report contains a table with nearly 30,000 rows and each row containing two links. The complete markdown-formatted report is 6.8 Mb and GitHub simply cannot render files that are so large. So, I was forced to split it into sections. Each section contains a table with no more than 1,000 rows each.

As with my other reports, the first column of each table contains a link to the e-mail text on the Wikileaks site that contains the malicious attachment. The e-mail itself is safe to view (although the text is usually spam/scam/phish/whatever).

The second column contains the URL on the Wikileaks site where the malicious attachment to this e-mail message resides. Since this is a direct link (i.e., clicking it would result in the malware being directly downloaded to your PC), I have obfuscated the link by replacing "https" with "hxxxx" and putting square brackets around the dot in ".org", in order to make the link non-clickable. If you desire to download the malware and check for yourself that it is, indeed, malware, you can trivially deobfuscate the link - just, please, do be careful.

The third column contains links leading to a VirusTotal page, showing how the different scanners are reporting the malware. These are safe to click.