No Clause for Concern

Filed Under: Malware, SophosLabs, Spam

Yet another instance of mass-mailed ZIP attachments containing malware (Troj/Agent-HLV). This time the campaign is based upon bogus contractual agreements, e.g.:

"Dear Gentlemen,
We have prepared a contract and added the paragraphs that you wanted to see in it.
Our lawyers made alterations on the last page. If you agree with all the provisions we are ready to make the payment on Friday for the first consignment.
We are enclosing the file with the prepared contract.

If necessary, we can send it by fax.
Looking forward to your decision."

This may be an attempt to exploit one's tendency to beware the words of a lawyer, especially those which are printed. One ought to always read the small print. However, in this case, the important "small print" is in the contents of the preposterous message body and NOT in the actual attached file which is an EXE within a ZIP.

Please do be vigilant about ZIP attachments in emails. There are many different campains out there and this very campaign will morph once again, no doubt. Whatever next? Details of an NHS appointment?

You might like