More Fedex Spam Malware

Filed Under: Malware, SophosLabs, Spam

It has been a relatively quiet weekend here at SophosLabs. However, we are continuing to see Fedex spam with a subject like "Fedex Tracking N*5421062126" and the following message body:

Error! No JavaScript in your browser!

The message contains a zip attachment called TR877123.zip or TR768212.zip, containing an executable file with the same name. We detect the attached files as Troj/Agent-HPK or Troj/Agent-HPL.

fedex_inbox11.jpg

It is likely that this campaign will change once again and there are many other campaigns so please be vigilant about attachments in email.

You might like