Spammers are now trying to excel themselves!

We have just received a sudden flood of stock pump-n-dump attachment spam, this time using the XLS format instead of PDF:



The scam is very familiar. We are all encouraged to buy a lot of stock from a mobile company in Frankfurt so as to push up the share price:


Once the share price has reached a threshold value, they are sold so that the spammer can make a killing. Well, I have news for you, Mr Spammer, we weren’t born yesterday you know!

We at SophosLabs always knew attachment spam would become endemic, whether using DOC, PDF, XLS or another type of file. We know the next campaign is just around the corner. We need to be vigilant. It is just as well that SophosLabs has 24/7 cover so that we can spot the trends early and fight back.