Malware writers are using multiple techniques to deliver their files and entice victims to run them, creating an effective infection vector. The most targeted countries are Syria, Turkey, Lebanon and Saudi Arabia. Victims trust in social networking forums, curiosity in following news related to the conflict in Syria, their standing in Syria and their lack of Cyber Security awareness. Once criminals infect the victims computer, attackers have full access and control over victims devices. The thejoe.publicvm.com domain is the most important and luring, that most probably collected the highest number of targeted victims.”]
Source: https://securelist.com/the-syrian-malware-part-2-who-is-the-joe/68350/