WorldPay card transactions carry malware danger

Filed Under: Malware, Spam

Cybercriminals are up to their old tricks again, disguising their Trojan horses by spamming them out attached to emails claiming to come from legitimate organizations.

Today one of the malware campaigns we are seeing pose as communications from WorldPay, claiming that your credit card has been charged on behalf of Amazon.

Malicious email claiming to come from WorldPay

The emails have the subject line "WorldPay CARD transaction Confirmation", and part of the email message reads:

Your transaction has been processed by WorldPay, on behalf of Amazon Inc. The invoice file is attached to this message. This is not a tax receipt. We processed your payment. Amazon Inc has received your order, and will inform you about delivery.

Malicious attachment
Of course, if you haven't bought anything on Amazon lately you might be all too tempted to click on the attached file (named WorldPay_CONFR.zip).

Which would be a mistake, of course, because it contains a copy of the Troj/Agent-JUC Trojan horse.

This is far from the first time that hackers have used a scam like this, and it won't be the last.

The message, as always, is to be on your guard and think twice before opening an unsolicited email attachment.

, ,

You might like

About the author

Graham Cluley runs his own award-winning computer security blog, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.