✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Alert – Campaign Deploying Malware via MalSpam Targeting Web Application Servers

February 25, 2019
Rewterz

Rewterz Threat Alert – B0r0nt0K Ransomware Infects Linux Servers via Unknown Attack Vector

February 25, 2019

Rewterz Threat Alert – Coinbased Smishing Campaign Dropping a Malicious URL

Severity

Medium

Analysis Summary

A new campaign of coinbased smishing (via SMS) has been observed which is running actively and has been directed towards senior-level employees. The receiver would be receiving the email like this .

FRM: 9297437532945863372473958264657826267824 SUBJ:__please verify MSG:__Amount received 20 BTC hxxp://zsx-ny[.]com __coinbase_pro”

The message was formatted like so (the FRM number has been altered). The sender’s number was “1 (410) 100-007”

Impact


Loss of sensitive information in your device

Indicators of Compromise


IP(s) / Hostname(s)

213.190.6[.]24

URLs

hxxp://zsx-ny[.]com

Email Subject

Please Verify

Remediation


Do not click on the given links which are being sent from unknown senders. Do not submit your device code to verify your device.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo