MSGID: 2:460/256 00000297
REPLY: 2:460/256 00000296
PID: tg_BBS_v0.7.1
TZUTC: 0300
CHRS: cp866 2
TGUID: 202096118
REPLYTO 2:460/256 202096118
RealName: Wilfred van Velzen 2:280/464
 AA> I received a msg from DHL today..
 AA> ..informing me of a package to be delivered:
 AA> https://susepaste.org/38043260
 AA> I don't think I ever encountered a .IMG attachment before. Isn't that
something for Apple systems?
 AA> But I sent the file to Virustotal:
 AA> https://susepaste.org/252272
 AA> So, some kind of attempt was made to fool me.

I think .IMG files are cdrom burn files. Windows can open them by default (I
suspect), so users can be tricked into opening them,  and "execute" the
malicious content...
--- tg BBS v0.7.1
 * Origin: Fido by Telegram BBS from Stas Mishchenkov (2:460/256)
SEEN-BY: 124/5016 153/757 203/0 221/0 6 229/426 664 280/464 292/854
SEEN-BY: 292/8125 301/1 310/31 341/234 460/58 256 1124 5858 5054/30
PATH: 460/256 58 280/464 292/854 229/426