Google tries to hire our app

Re:Google tries to hire our app by twistedmack on Friday March 18, 2016 @05:51PM (#11315456)

I got the same e-mail today. Upon trying to open the file within a virtualized container there is a word document. Opening the word document without macros enabled I get.

THIS FILE IS PROTECTED WITH RSA KEY PLEASE ENABLE CONTENT TO SEE THIS DOCUMENT

[ Parent | on HN ]

Re:Google tries to hire our app by twistedmack on Friday March 18, 2016 @06:13PM (#11315620)

The DKIM-Signature isn't correct. They do not use sha1. This a fishing attack vector in my opinion.

DKIM-Signature: v=1; a=rsa-sha1;

[ Parent | on HN ]

Re:Google tries to hire our app by twistedmack on Friday March 18, 2016 @06:21PM (#11315672)

Virustotal indicates the attachment has a virus.

[ Parent | on HN ]

Re:Google tries to hire our app by phwizard on Monday March 21, 2016 @06:22AM (#11327134)

Thanks for checking. I tried opening it in Word (Mac) and only saw that RSA text.

[ Parent | on HN ]