Gift card from your friend? Beware spammed out malware attack

Filed Under: Malware, Spam

Cybercriminals are attempting to infect email users by spamming out a malware attack, posing as a gift card from a friend.

SophosLabs has intercepted a malicious spam campaign that has hit inboxes around the world, with a Trojan horse attached as a .PIF file.

Gift card for you malicious email

Subject: GIFT-CARD FOR YOU [number]
Attached file: gift-card.pif

Message body:
Hello! You Received GiftCard From your Friend,
Check it in Attached

With Best Regards,
Giftcard.com

Another version, with slight wording and typographical differences, reads:

Subject: GIFT-CARD From Your Friend [number]
Attached file: gift-card.pif

Message body:
Hi! You Received GiftCard From your Friend,

Check it in Attached
With Best Wishes,
giftCard.com

Many Windows users may not realise that just because a file has a .PIF extension doesn't make it any less executable, or any less of a risk to their computer. Opening the file will infect unprotected Windows computers with the Troj/Agent-RNY Trojan horse.

The only defence for users is an up-to-date anti-virus product and a healthy skepticism about unsolicited emails which arrive out of the blue in their inbox.

, , ,

You might like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog at https://grahamcluley.com, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Follow him on Twitter at @gcluley