Gozi Malware Spreads through Fake Italian Revenue Agency Email Campaign

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

A fake Italian Revenue Agency email campaign tricks victims into downloading a malicious attachment that installs Gozi, a binary that bypasses Italy’s geofencing and creates a loader process on the victim’s computer. 

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.