.. /.Gz

Phishing
Double Click
File Archiver

Contributors:

Adithya - @ravooriadithya

Description:

A GZ file is an archive file compressed by the standard GNU zip (gzip) compression algorithm. It typically contains a single compressed file, but may also store multiple compressed files. gzip is primarily used on Unix operating systems for file compression.

OS:

Windows
Linux
Mac

Recommendation:

After validating business usage, monitor & block the download and execution of gz archive files on email & web gateways and endpoints . Whitelist as required.

Resources:

https://antivirus.comodo.com/blog/computer-safety/coronavirus-push-lokibot-trojan-malware-unsuspecting-users/

File Samples: