Sleazy slutty emails bombard inboxes, carrying malware

Filed Under: Malware, Spam

Neon signAs many North Americans return to their offices after a long Labor Day weekend, they may find something unpleasant in their email inboxes.

A malware campaign has been widely distributed over the last couple of days, using a wide variety of different subject lines and attachment names.

There's one thing in common between all the emails, however. All of the emails use sleazy slutty language to trick red-blooded men (we assume) into open the attached file.

The many different messages claim to come from what some would euphemistically describe as online "dating" websites. Typically the emails will claim to contain photos of a young woman in her twenties, who isn't fussy about what kind of man she would like to hook up with (some say ages "between 21-99" are fine).

Slutty email

As mentioned above, the subject lines and attached filenames can vary widely - but there's definitely a theme..

Slutty subject lines

Sophos detects the earlier attacks as malware designed to infect Windows computers: Mal/BredoZp-B, Troj/Agent-TFW and Mal/BredoZp-ET.

And here are some examples of the latest instances we have seen, which Sophos detects proactively as Mal/Zbot-CX.

Slutty email

Slutty subject lines

If you make the mistake of opening the attached ZIP file, and running the files within, and you're *not* protected by Sophos, you could be infecting your computer with a Trojan horse.

Once infected, your computer could allow a remote hacker to stealing information from your PC - all because you thought some sleazy slutty photographs of a young woman had fallen in your lap.

Social engineering tricks continue to fool users into making poor decisions - remember to always think with your head, not with your trousers.

, , , , ,

5 Responses to Sleazy slutty emails bombard inboxes, carrying malware

  1. Judith says:

    No one should EVER open a .zip file from someone they don't know!!!

  2. Bouncy Voy says:

    Dammit... no wonder these girls have never called me back when I reply and run the attached software... Its a scam :(
    Coincidently I am still waiting for that Nigerian bank to deposit the 2.3 million into my account, I paid the transfer fee of £400 over a week ago!!
    They must be busy as they havent replied :(

  3. Jay says:

    yes, but what, if they are hot?

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

About the author

Graham Cluley is senior technology consultant at Sophos. The readers of Computer Weekly voted him security blogger of the year in 2009 and 2010, and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which was nice. He was also named "Best Security Blogger" by the readers of SC Magazine in 2011. You can subscribe to Graham's updates on Facebook, follow him on Twitter and circle him on Google Plus for regular updates.