Here’s social engineering at work again: an email with a suspicious-looking attachment is circulating around, claiming that it has information on recent terrorist acts in London and Edinburgh.

Of course, this not true as it is taking advantage of the media hype surrounding the terror plot that was prevented in Heathrow airport in the UK. The attachment is actually a Trojan that downloads another file (possibly another malware). The sample is being processed right now for analysis.

Here are the email details:

Subject:
New acts of terrorism in United Kingdom!

Body:
Today the Scotland Yard has informed on set of new acts of terrorism in London and Edinburgh! You can learn the detailed information in the attached file!

Note: Trend will be detecting the Trojan as TROJ_SMALL.CEI. Stay tuned for updates.

Update (Jasper, Thu, 24 Aug 2006 09:56:04 AM)
The pattern for this malware has been already deployed in CPR 3.682.01.