It has been a relatively quiet weekend here at SophosLabs. However, we are continuing to see Fedex spam with a subject like “Fedex Tracking N*5421062126” and the following message body:
The message contains a zip attachment called TR877123.zip or TR768212.zip, containing an executable file with the same name. We detect the attached files as Troj/Agent-HPK or Troj/Agent-HPL.
It is likely that this campaign will change once again and there are many other campaigns so please be vigilant about attachments in email.