Sophos Cloud Optix
Have you received an unexpected email telling you that your credit card is one week overdue, and that you must pay the debt within two days or face additional charges?
Well, don’t rush to open the attached file – or your computer could be struck by a malware attack.
The emails, which have been spammed out widely, try to frighten you into opening an attached file called Report#113.zip.
Dear Customer,
Your Credit Card is one week overdue.
Below your Card informationCustomer 0066594169
Number XXXXXX
Card Limit XXXXXX
Pay Date 27 Jun 2011The details are attached to this e-mail.
Please read the financial statement properly.If you pay the debt within 2 days, there will be no extra-charges.
In 2 days $25 late fee and a finance charge will be imposed on your account.Please do not reply to this email, it's automatic mail notification.
Thank you.
Note that the customer number quoted in the email appears to be randomly chosen, so may differ in the emails you receive.
Subject lines which have been used in the malware campaign include “Your financial debt overdue”, “Payment by credit card overdue”, “Credit Card is one week overdue”, “Credit card payment of overstayed”, and “Credit card overdue”.
If you do make the mistake of opening the attached file, you run the risk of infecting your Windows computer with malware that Sophos detects as Troj/Invo-Zip.
Cybercriminals use social engineering tricks to fool you into making unwise decisions.
Whether it’s making you believe that you’re about to see a sexy video, win a pair of free air tickets or discover what company has been debiting your credit card, the intention is the same with malware attacks like this – to dupe you into running dangerous code on your computer.
Sophos products intercept the malicious emails as both malware and spam.
Next week, Naked Security is renamed "Facebook Scam Warning Service – A service for people who don't know how to spot a simple scam on Facebook and need to be reminded every day that a new scam is available."
Haha.
The customer number is the format used in Switzerland for mobile numbers 😀
Thanks for this post on malware hidden within email spam. Malware can be hidden in a number of places, including familiar websites, emails and social networks. We advise our users to always have security software to scan emails for potential threats. For free security solutions or to join the discussion on online security, why not pay us a visit at www.facebook.com/avgfree?
Maria Arenillas
Community Manager at AVG
Finally! A positive response that doesn’t have the author flaming those that are not as educated in the particular field of computer security… even if your response verges on spam.
It’s hard to find positive, helpful, educational, and sensible responses between the “idiots”, “brainless”, and so on remarks about those who simply are not up to the authors level (thank God).
Internaut – Agreed.
Whilst it is perfectly acceptable to be privately smug about one's own knowledge of the subject, posting it in public just makes the author look a d**k.
Hubris invites its own reward.