Summary of payments malware attack spammed out

by Graham Cluley on August 16, 2010 | Leave a comment

Filed Under: Data loss, Law & order, Malware, Spam

SophosLabs has intercepted a widespread malware attack that has been spammed out to email addresses around the world.

The emails, which have the subject line "Summary of payments" have a ZIP file attached to them which contains the Troj/Bredo-EB Trojan horse.

Summary of payments malicious email

The emails have the following characteristics:

Subject: Summary of payments
Attached file: 2010 Financing.123.zip
Message body:

<recipient's first name>,

Attached are two files showing the amounts paid this past year.
The files are in Lotus 1-2-3 but I think you can open these in Excel or the Open office spread sheet.

This is working very nicely.

<sender's name>

Of course, the emails haven't really been sent to you by the apparent "sender" - the cybercriminals have forged the from: address.

As always, you shouldn't let curiousity get the better of you. Practise safe computing and always be suspicious of unsolicited attachments sent to you out of the blue.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

About the author

Graham Cluley is senior technology consultant at Sophos. The readers of Computer Weekly voted him security blogger of the year in 2009 and 2010, and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which was nice. He was also named "Best Security Blogger" by the readers of SC Magazine in 2011. You can subscribe to Graham's updates on Facebook, follow him on Twitter and circle him on Google Plus for regular updates.