Gift card from your friend? Beware spammed out malware attack

Filed Under: Malware, Spam

Cybercriminals are attempting to infect email users by spamming out a malware attack, posing as a gift card from a friend.

SophosLabs has intercepted a malicious spam campaign that has hit inboxes around the world, with a Trojan horse attached as a .PIF file.

Gift card for you malicious email

Subject: GIFT-CARD FOR YOU [number]
Attached file: gift-card.pif

Message body:
Hello! You Received GiftCard From your Friend,
Check it in Attached

With Best Regards,
Giftcard.com

Another version, with slight wording and typographical differences, reads:

Subject: GIFT-CARD From Your Friend [number]
Attached file: gift-card.pif

Message body:
Hi! You Received GiftCard From your Friend,

Check it in Attached
With Best Wishes,
giftCard.com

Many Windows users may not realise that just because a file has a .PIF extension doesn't make it any less executable, or any less of a risk to their computer. Opening the file will infect unprotected Windows computers with the Troj/Agent-RNY Trojan horse.

The only defence for users is an up-to-date anti-virus product and a healthy skepticism about unsolicited emails which arrive out of the blue in their inbox.

, , ,

You might like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.