"Government-Backed Attackers May Be Trying to Compromise Your Device!" email

[Andrei-I 0]

Got a weird email today and decided to share on the forum. Looks like a phishing attempt, correct? The link sends to the zip archive.

[Marcos 5,468]

Please contact ESET Israel to find out if this is a legitimate activity by them: https://www.eset.com/il/.

[QuickSilverST250 7]

ESET partner breached to send data wipers to Israeli orgs (bleepingcomputer.com)

[itman 1,807]

1 hour ago, QuickSilverST250 said:

ESET partner breached to send data wipers to Israeli orgs (bleepingcomputer.com)

This is a classic example of why no e-mail these days can be fully trusted. Regardless of the e-mail source if the content appears to be of unusual nature, it should be fully verified prior to performing any activity stipulated in the e-mail; especially any download activity.

It appears the OP was using a third party e-mail scanner that did warn him that the e-mail was suspicious. Then he wisely did what is posted above by posting the e-mail in the forum for starters.

Of note;

https://doublepulsar.com/eiw-eset-israel-wiper-used-in-active-attacks-targeting-israeli-orgs-b1210aed7021

Edited October 18 by itman

[QuickSilverST250 7]

We train our clients staff regularly and regularly remind them to alert us when they get any strange mails that was not stopped by EES and ECOS. We had many times mails slipped through and alerted us. We then submit those mails everytime.

[Nightowl 206]

VT Link for archive : https://www.virustotal.com/gui/file/2d55c68aa7781db7f2324427508947f057a6baca78073fee9a5ad254147c8232